MAL-2025-187448 Malicious code in impulse-toml-despina-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e30ea46b93efbbe7455150310508ae764adf5908598dcdf07232a5262db6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187253 Malicious code in gulp-oberon-husky-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75617fbb11faaa49b53d3be3e65087cce1580f4404bed0e40ed9913bed877bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188087 Malicious code in mocha-epimetheus-zenith-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfaa8c873e43d9d76a226426944aa33e371fc2d3ce57d6b8ca52c2611cc2c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187445 Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188640 Malicious code in perturbation-coronalmassejection-terser-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab3af769d7114c72118e1335e26d4d061cc1c56c6a96424a5deb5bc7269a839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Use After Free (CVE-2020-11656)

In SQLite through 3.31.1, the ALTER TABLE implementation has a use- after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2019-19645)

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2020-35527)

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082ff2d66979d0f2b073bc8f2e9812248c01496b1ed3db0a70c2dfec37468b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b6d9052bf699b236ff18ab5d569a6e2d2027ff5d7359827ff62c105427e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497fec8798263c93aab0cea87e6ac71e980c2b8043b2bd4c0468e6637c39ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed4d481fffc80c188a418b5db1931db1f5b0fd447bd01c0fcc08389016cc1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b8c921a1257fd724917b4f9bcccbc35f585ea7bcc744938192d9c7bccaccd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnieamfnugpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3637c4e46d4c374c0cc7aecc344a8bb57e219a8b36741dd8cac2d9a8251d629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62f2398b0e91d39071d20a1700542e17681b655a78ec4ffb8e77b249f6ea93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-atafiafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f562228fb13b0286d654d4379c0fb97a654ac9034581bd7bdc8a2bddcb7b17c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociy-ng-gufaguagufaaci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19346ce0e663920d4dece08b4042afb9911d08ead1bd873de557be1227e8c7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...