CISA Releases 18 Industrial Control Systems Advisories

CISA released 18 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-317-01 Mitsubishi Electric MELSEC iQ-F Series ICSA-25-317-02 AVEVA Application Server IDE ICSA-25-317-03...

MAL-2025-178337 Malicious code in riya-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4dc20a983854cf2efd88c0a8b59f8a97f9304df8b33b4f8088d80d18992e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140386

Malicious code in lia-8 npm...

EUVD-2025-137002

Malicious code in riya-8 npm...

EUVD-2025-141276

Malicious code in ira-8 npm...

EUVD-2025-141486

Malicious code in hokage-8 npm...

Malicious code in alvira-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91bd6a8aeca7ccff70360c12558909dfbd3a09fe43d4ef5e2310075db8b38f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999b82b7b0c8fed52a63455e0a258a69c0e3b407fc7e53cb49d21ac9ae2f0da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146238

Malicious code in wulan-8 npm...

Malicious code in cinta-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027f473c5692317572f6b091b8bdff91b1f5700fe89b0ae3c8003025205aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6e7348a03f45ecadab39ddbdbff14687ba962143c8221856f69d2eb265248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152075 Malicious code in aji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2e80a533b67b712672e6985391aa383cc0541f1faf41fedec2fe5784144162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6236df3fcd4a3e8050898da47a4cbbb9bd1c736080561dbc6c740ca458c896e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a8342b52fe548b0ca1386ba84897957d56b9f5b12fda90e97ff0fc592f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154113 Malicious code in cinta-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027f473c5692317572f6b091b8bdff91b1f5700fe89b0ae3c8003025205aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b46be4f8f691632fe61e7132dc9845f79ee72875cf39e53da9b65b86ec0682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6accbd06b6c2da8e83b13bf8fa6602138e0ee0f4784c7c62a76e27bccf84667f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef78c28f2385dcf0f013a5a71e96fe2dc03b31fc0e1fe300bd9ce0c68057e142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155611 Malicious code in hafiz-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0337dd96b9382862850d6234e0a3f74c14fdec9220c4a362fcbf177f20e38f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...