MAL-2025-49549 Malicious code in zul-menjes100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dad26d156bd341f200528b2462bad3c2f932eb0b9fc2fac75dcd03371b8f4f The package zul-menjes100-ruro was found to contain malicious code...

MAL-2025-49573 Malicious code in zul-wajit78-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe11a287827a6251f231a6f79ad637145bb4d740999a29a715b04e44acfa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49566 Malicious code in zul-serabi13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae50d72d17be1b9a8210d16a6f549ce995a4d0a14dac45ed53402cff0b9ffad2 The package zul-serabi13-riris was found to contain malicious code...

MAL-2025-49543 Malicious code in zul-ketan40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7578a39defed2adf83c88ae097b36849ab307e3342ce3adf316ad97439e16de The package zul-ketan40-ruro was found to contain malicious code...

MAL-2025-49466 Malicious code in zain-dradag28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdee7fc2dc67cf1ed79a0d3692594db2564fe988eb72eabdf92ab23a413e116c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49545 Malicious code in zul-klipo99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20537ef930386ee66e4ab8cdaa881ec1f227a30199a613669510d0bcb4e70632 The package zul-klipo99-sukiwir was found to contain malicious code...

MAL-2025-49538 Malicious code in zul-jamblang35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83e4fd00e2c4ec6c1e5b47fac14229ac096d7b0ebf7ef8335cea32060f70f91 The package zul-jamblang35-sluey was found to contain malicious code...

MAL-2025-49572 Malicious code in zul-tumis35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc285764f3fb4e3298c5a774d3d1252f454a41741ff65127ef42b920c594ab8 The package zul-tumis35-sukiwir was found to contain malicious code...

MAL-2025-49497 Malicious code in zain-tempe2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93ad0756e9657e985293c0ba73e5c28c7e3ffc027dc34285287c2e2f1f2a59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49540 Malicious code in zul-kacang20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94a7b90bbdb7c5c71b10e7065ab4ada556bf0f12db15b1931c0c91edf4f5f93 The package zul-kacang20-ruro was found to contain malicious code...

MAL-2025-49474 Malicious code in zain-lepet73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7970e8ec39649fc7c2c4c7cda589cbeec9f1b93c70fc98b8e9ebb6ba570e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-62375

go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...

Malicious code in @deputyapp/copilot2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8ee55f0fba70e99bcfd17466e3bb1bf57b3bbdd3e6f7a61a54673d0b78aff5 The package @deputyapp/copilot2 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in gca-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdec861d83395f300958ada30581644db6a9e7fe7b1e258cded6074ec5f651d1 The package gca-package was found to contain malicious code...

Malicious code in supervot4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ac7d1a98e1fb363159453426b903c2a83e7bdd67a18f35130cf0cf5f47ab1 The package supervot4 was found to contain malicious code...

Malicious code in runtimemoy2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf89081e36d0c4d68ca37c38ba555b33b3c28a990727e25f741f3e299908bdd The package runtimemoy2 was found to contain malicious code...

Malicious code in megaexploitvorkemol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c13215fdde1baead0f1eb06bf68b751465f0714539e7f46f6e62c21d9665b9 The package megaexploitvorkemol1 was found to contain malicious code...

Malicious code in lowerx-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fa386b19d15d8a4ede1c588cd50b4feaab4926550cdc32567a37dfea42713 The package lowerx-package2 was found to contain malicious code...

Malicious code in runtimemoy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d105a6daee134b98d67022d827d5c5becf0b05d5e89c9c326115d79670be5 The package runtimemoy was found to contain malicious code...

Malicious code in gibertserctf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0573557ee97533415528414c8c42d27e7dd380d35a0a57847a9e99209807910 The package gibertserctf7 was found to contain malicious code...