MAL-2025-188915 Malicious code in proxima-neptune-altair-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ca7458136d92609e9587dd89f19de7cdd64b1288bfa111ccf3d25f03a46d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186628 Malicious code in dotenv-sedna-inflation-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a63ee5fbe8c7a17380d2b2176b6e0387bba7788e959c4eb1e36dfa779195d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187486 Malicious code in innercore-yildun-blaze-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6a67c1532daa0289287aa51f609d0b21a44bca1e258d173afd670f7b9aede7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Insufficient Entropy (CVE-2019-15847)

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

Malicious code in lomi-fus-ufisga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30773ee83b3a54425ca14e3d8a6e40d2576eaaedcb9fa05b856809dc62cabfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55aad895ac26fc7cb451d0d81d0571f6fd875126a378df8b6407d41bad70458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-giososi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc0d1e6df2737aac6102c3814d44466300ad77f0df5a803f134eeb6dde93281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38e2d522814157fcf03b92e28a8ce9bc9da548ad69619fead07d51e6c33df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e137d7638c192c4aa9b8194d2b5cc8155b02dd6ac5b880727d600742798fa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufaguna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb915102588514880e302d2ec8729ce8c9492f46386192db09862c375f41e0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916701b1b6ad5619f5403a69fec5786956c7eb7800ef9d35ac92ba99ffbfcd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962969005951cb082def08faee126a0010e2039b8161d3bf02cd208bd13b5686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6a6aec576e9ed6b84a41d4c536b4d49f5afd10f48b9fc99b4521c308408a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdmafdacafeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e174eaa05b7b65e6ed969bc051aa0d8f9b7d7727edb3623214b55d2330175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufi-cocaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d857b8b6d5145d9b7a5908bac252ff27c023cbdbedd5b8e5e27ca1493616ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070457662d9e722929bd437d563898e0d14fcf904fb8850ae35c587e79ec6fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44d41e3b1d9a79947369bdde1db715a86ad888babfd9b6316065908b2fcf63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-oy-gisostsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245800ff90c2f22b0478cdd48b2c7e0899423a67d912520bddc6ada569a23113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...