EUVD-2025-83337

Malicious code in yanti-kripik62-ruro npm...

EUVD-2025-70130

Malicious code in hadi-lapis35-ruro npm...

EUVD-2025-69110

Malicious code in maman-lumpur4-ruro npm...

EUVD-2025-83011

Malicious code in adjacentcobraz3n npm...

EUVD-2025-71026

Malicious code in citra-rujak99-ruro npm...

EUVD-2025-71046

Malicious code in citra-kue55-ruro npm...

MAL-2025-104325 Malicious code in interesting_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def8c5200750d4145bb67447129fc36490bb18f560863482658de0fa6615e25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104677 Malicious code in joni-kacang37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ee5e796c1c1850f60d1578302cf9d699914c38dec1807eac73f24d96c3c02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100496 Malicious code in cindy-ubi79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7d0de945f62db748a9bea39702e7e58b11b933f9577f8691493dd92088b9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8108

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

Malicious code in troubled_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6211a2c53bdd3635b89c896393f92e29b3c7fd2e6e62757a9c35a8e50c9a8332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71307

Malicious code in unlikelyanglerfishz3n npm...

EUVD-2025-71666

Malicious code in associatedwoodpeckerz3n npm...

EUVD-2025-71663

Malicious code in bewilderedmarmotz3n npm...

EUVD-2025-71522

Malicious code in isolatedlampreyz3n npm...

MAL-2025-98597 Malicious code in absolute_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd5166d9671b235ca3f992f84668d48d313973d58eb53b133c7fdd9b991cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115b4ec2a2bcc1c752d004ccc59a334f1977771523b4926c1c0e08357bcc82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

BELL-CVE-2025-40108

Bulletin has no description...

EUVD-2025-72659

Malicious code in butterflyyellow-44-tisubasah npm...

Malicious code in yanti-rujaksoto59-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dc39a8542208d850be902c4e11ba7d4c29ff0741dd377128404815a971126b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...