CVE-2025-40936

A vulnerability has been identified in PS/IGES Parasolid Translator Component All versions V29.0.258, Simcenter Femap All versions V2512.0003, Solid Edge All versions V226.00 Update 03. The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS file...

EUVD-2025-137058

Malicious code in riya-29 npm...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140414

Malicious code in lia-29 npm...

EUVD-2025-141303

Malicious code in ira-29 npm...

Malicious code in riya-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884fea8f1d261f1bbb6082055a97ffc7a4b33b8ae20fcd8bdb4b6e805a0bcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141515

Malicious code in hokage-29 npm...

EUVD-2025-143525

Malicious code in alvino-29 npm...

Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172778 Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4b31c18723a0ba9fcc932d21a5640c8bc152c9a44e2c4b51321b8e5c86faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146259

Malicious code in wulan-29 npm...

Malicious code in wulan-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7575013590cf64fc252144dd7d1a54df30f2a517ad248a0fec6b8784dc02e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32936127d3d229cccd72cae09b02050932b73bad1d10f276babee8d240ba15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-29 (=1.0.0)

muklis-29 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-29 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160813...

Malicious code in kentung-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f035d7fd539d2aeef5f9d3420b5ea3f0cfeb5bf7ba01981bd2a1321f86a9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e78bc4854daed77473f263a66b8f50e2a536f8e6c9b0d54c1e28a66cc2d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...