Malicious code in rita-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d0c1a3889fec62ce1b610a9c0cfe8ffc1b318d0b9b3ad2e2c21e9e84275d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-5-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d005f0eb4fc0470848da9fb4cea7cd7a75ff88c9842a5f005967394c2c035f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146215

Malicious code in yuda-5 npm...

Malicious code in ilop-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067029fc6e8d844ca8c116a49d77e8204b1c5295b3931dd7954543fe602424ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4b05c01cd0ca7a2cdfbf2cd5aa8b3b159a5e7a6eef62816122f0dce331c9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c9487a9f19ce61cbd98be35d2598d9f7f25834ba33c5a7d7dde4a9e1126f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696bc5785d0c20604b194178269da1d5fa9ec35b5414ac0e1e5039ad179f6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170571 Malicious code in wulan-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aacf273766c1822c8d7422019a6fc12d8d9c59ce731cc0acfc8d312e1bc17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157531 Malicious code in kentung-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32097992a8781e099d77e27a1404da2d60c1e1b703159f42352d91559bfb17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160298 Malicious code in messi-buysa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69df1a1c62ebd0aa09385ea9961018e8acea1c2c2e6d7a64967ad001faab8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154334 Malicious code in dia-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaacc430a8bb8dbc3d222378ba9fe8457df4f43b02469d756bf3eed842a66b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156302 Malicious code in ilop-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067029fc6e8d844ca8c116a49d77e8204b1c5295b3931dd7954543fe602424ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154080 Malicious code in cinta-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a3269c781cb833944431f0b102d13508a174843500367471d15574f07b5ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156030 Malicious code in icha-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175cb59820d68fcaa8fbe49f43bae4ae630f154bbde4a1413a19eb8f5082b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DBLTek GoIP-1 安全漏洞

The DBLTek GoIP-1 is a gateway device from Deborah DBLTek China. A security vulnerability exists in DBLTek GoIP-1 GHSFVT-1.1-67-5 and prior versions, which stems from a local file inclusion issue that could result in reading arbitrary file system files...

airpig2011 IEC104 安全漏洞

airpig2011 IEC104 is a protocol used for power system automation communication by the individual developer dj chen in China. A security vulnerability exists in airpig2011 IEC104 Commit be6d841 and prior versions, which originates from a post-release reuse during multi-threaded execution that coul...

EUVD-2025-74375

Malicious code in pastguineafowlfuchsia-5 npm...

EUVD-2025-74519

Malicious code in interiorliongold-5 npm...

EUVD-2025-74167

Malicious code in tastelesswoodpeckerpurple-5 npm...

MAL-2025-111778 Malicious code in current_lark_crimson-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...