CVE-2025-40936

A vulnerability has been identified in PS/IGES Parasolid Translator Component All versions V29.0.258, Simcenter Femap All versions V2512.0003, Solid Edge All versions V226.00 Update 03. The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS file...

Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e08b55a163e140e6f94266d934eeaf36cba8a5104eeeb0a0173727b307b8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140414

Malicious code in lia-29 npm...

EUVD-2025-143525

Malicious code in alvino-29 npm...

EUVD-2025-141303

Malicious code in ira-29 npm...

Malicious code in riya-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884fea8f1d261f1bbb6082055a97ffc7a4b33b8ae20fcd8bdb4b6e805a0bcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137058

Malicious code in riya-29 npm...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172778 Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141515

Malicious code in hokage-29 npm...

Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8099027c4d18520221b2b2e1e22fb826406a7397d3bf20fee04ae2696182f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32936127d3d229cccd72cae09b02050932b73bad1d10f276babee8d240ba15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a4c5fda288a42df270c080d32a1b0c5f8356cfe149fabf94dc45f338a874f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9b3bc91d824dcf8883b0f56f93895cbd9feebe6985d3973ac1794f28ce1b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c01a0c6d868f7da648c41d256781344bddcc3be5ed366d3546015ac39dc5fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f035d7fd539d2aeef5f9d3420b5ea3f0cfeb5bf7ba01981bd2a1321f86a9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af8989e322052798da1d25174b7b3b6ab333e30d7979cbbf79b2d12b2ff965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e78bc4854daed77473f263a66b8f50e2a536f8e6c9b0d54c1e28a66cc2d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...