CVE-2023-6246

Tested on default fedora WS 38...

Malicious code in lia-38 (npm)

Source: amazon-inspector d9754448e270007376789d80a0473b2c215864a29f6880d339eb22c46b5b732b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kentung-38 (npm)

Source: amazon-inspector 02167f3e33f423e6bb6cd2dc57640d166f79210751b5760edc1c24797b3d8bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Astra Linux – Vulnerability in Wireshark

The T.38 dissector crash in Wireshark versions 4.2.0 to 4.0.3, and 4.0.0 to 4.0.13 allows for denial of service through packet injection or malicious capture files...

Malicious code in ita-38 (npm)

Source: amazon-inspector e71bb2a880b3c3d7bf16972cd9885c105e7f205f886caa06902c1f8488c1eae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ira-38 (npm)

Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intan-38 (npm)

Source: amazon-inspector 3f5c1fdca1f69275882838fabd2dc40544840b1d52ed394042ecddc6537db707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilop-38 (npm)

Source: amazon-inspector bbf181be2adcefb98113cc92cf077a35ca0ca26b786b21e1db3c101184c32fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilang-38 (npm)

Source: amazon-inspector a0f7781b13253de2c8e9b5e0c78889752e5034f8e1a0d4347a0a05b050466453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in icha-38 (npm)

Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hokage-38 (npm)

Source: amazon-inspector 50d4da4efc056c9d764bad00c35d3ae93acc0b268722c1a8ef9f665e7231eea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hafiz-38 (npm)

Source: amazon-inspector de459f8fff376905ad71637048adbe269f5d0ecf49b827be67c84b9403facdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in glamorous_guineafowl_orange-38 (npm)

Source: amazon-inspector 7252399e3c73bff2213d69c3523815fd5c297aaea95cf3a1616e2bbdc577da97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +36 more potentially affected by CVE-2026-88057 via @angular/compiler (>=20.0.0, <=20.3.21)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-88057 Source advisory:...

Malicious code in electric_quail_white-38 (npm)

Source: amazon-inspector 6085bbfee70ecfdb2261c938c51c9e6e9a484833621689b29a6068fc07564164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dia-38 (npm)

Source: amazon-inspector bf9792a3a451d3e3be12f7c50a24ae8c379bf440ef5704968a13c0eeb9c63c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dark_quail_apricot-38 (npm)

Source: amazon-inspector d0309e6febce7225fd52559c5db9311a3f2e381127af9b7d036dc9a8a4cb4607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cinta-38 (npm)

Source: amazon-inspector 569b6e11ceb6820f54463f250cffb61b923677d0ce956dd8be5aba0e7897f39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in aril-38 (npm)

Source: amazon-inspector 1a12622c17a25cd1ab239e02ce0ed1ea6e83e8f68d57e772e8eea3d383fc81d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alvira-38 (npm)

Source: amazon-inspector 8c41fc8e29d79f1dd6aa634c5ff4b58270b57bfac8a8d21ae5240b5c68e70c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...