MAL-2025-190171 Malicious code in visualize-decompress-finally-abstract-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96eaec8af9fa8b01c9bdf1bd478313f22e297e828753a7e086ece4042c294b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188664 Malicious code in phi-shell-old-old-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8b98f48373b31cbb5f1e89f4a12dbe3f2261af644871c9045b89528e7622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185373 Malicious code in acamar-higgs-izar-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb732a87c0345bf9c561af3f6c8089b30cf557c589c53180609faf4115b2a691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187995 Malicious code in mesosphere-query-dynamo-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade0f9fd45452062aac0899a4880a860ceef294caf0210e74d81e62b34c6889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186367 Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7b624253f4701adc0d6788e133d422ccba7de259ae6dc18a12697f8594e8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188099 Malicious code in module-data-secure-psi-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0588a47bb58349ff90bb5ef1641bd09c9dcc5edbce002d0762474874d097c635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185855 Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189244 Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52050453f7f9de40e6c1a5726233c5291dc493693fe69bbf213323ee6f4e3e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187773 Malicious code in library-babel-meteor-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9e462c051102c828b4d50e3973255ce834bba491eed99cf30b6f877f08521f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188884 Malicious code in protected-old-compile-java-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b82b9faba756ec3297391b2a0c1518d9b45163858d66e9998384660a6c80998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187679 Malicious code in kernel-visualize-meta-import-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9223446c8456063e02bf6a2c8259e55d37e8b0523946e7d529d719fa47b3a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186204 Malicious code in colors-gravity-cosmiconfig-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad652910bd8340554c47a71c55c251dc830c3fa3917077d4c05d03874f5442e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185813 Malicious code in biohacking-axios-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efdccd5f20956e76e5cbd07eec5aa70ae4c11ead7e25a8d925cd659fd5b4975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186978 Malicious code in final-daemon-route-boolean-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8334b78cd08ab5b888c2e351b37dd8221311c010e1d1b12e973d3ac9d0367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189225 Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad219c6c13a2f6799e4676b3d3104655eb69ed912f81bfa7f92b9610298c61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46818

Name of the Vulnerable Software and Affected Versions Envira Photo Gallery versions up to and including 1.12.0 Description The Envira Photo Gallery plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check in several functions. Authenticated...

Siemens SIMATIC S7-1500 Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2013-4235)

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 Use of Incorrectly-Resolved Name or Reference (CVE-2022-27778)

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Malicious code in moki-ni-hujim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b38f07a2652ba1298e329787585d3217a49b90f60b4c0930d1e60cfbc1c8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...