GHSA-7WQ2-32H4-9HC9 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

Malicious code in hokage-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1f527724b00de281b34ab4e3d27d9329971eb1e87e614a0562dd59b365a22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140435

Malicious code in lia-10 npm...

EUVD-2025-141536

Malicious code in hokage-10 npm...

EUVD-2025-137098

Malicious code in riya-10 npm...

Malicious code in riya-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb670811120e3b3e71e2ea15ae74fa6b466c10144068d0fb9875b61186fe4ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8cc85fdc079b7e706c51718094a6c739939657ba748ada6c86cf94cd9090fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178289 Malicious code in riya-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb670811120e3b3e71e2ea15ae74fa6b466c10144068d0fb9875b61186fe4ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afded46446dfb0efee0e23d16389c869040ee1c346302a8a0526ac11bce6a4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04ce2fcb4cc8486dace9f2551edc9f4e443482b9315e119e9628b489621b6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29279a8610c1d3df05680eb9d25da9f4adad974763f039cab998daa0fbdedefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146278

Malicious code in wulan-10 npm...

Malicious code in fauzi-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bcbfa55a33a177d714030adf5a496d7b3ebe11a71aaf52780ac9064b731d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156209 Malicious code in ilang-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f480f6cc844c019624fc757b76ff79d1fedea008f92df1006e28c9a604e738ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165234 Malicious code in ruji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88209dbc9f546f304d3907deb5a544978efa2fa1afd826a15a9724200d6c55f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164879 Malicious code in rita-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec9be1b48bc6aad26b09bf6e985602655dfde67f890aedc2523222b34e6dfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42372fdb54c843b791f7713f6c8f2370821d4b643852c7c179fbc3fa1d64015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152807 Malicious code in aril-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e547210cee7c020317a68221994a3aa384b4bdf1a99f92c9ea7b57332ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152416 Malicious code in alvino-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc25a8d2bc71c022320fe65f581877fd2d55fd2ce4d67bd444d5637b7d2010c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159605 Malicious code in manda-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665537308432e16e8bb5aa57f85428f060a8b8f85f4b0720ec965824e304e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...