Malicious code in fajar-klanting79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e47598841c8b029c70e0de33815d6f38c720c2a73b74073dbe18b82ec9c48c3 The package fajar-klanting79-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in udin-nasi49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3694a4f7d0a545ca464e8236871d4bade9007b2b1b8032b606b2dc7a64cec42b The package udin-nasi49-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50125 Malicious code in citra-donat9-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b65336a8948976890fa6a21f27e9fcddfb440670b84df014b15ea09f1529d The package citra-donat9-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51180 Malicious code in candra-gaplek68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4e41cf362f4a38b7efc82f8f2b108279d406579a4af74ab9a4bec6c11538a5 The package candra-gaplek68-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dewanto-jus58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5071e4b31c8b04a8a53989fb61f9b899d731fbd7d1cfe688ff75c01cb7e1e8 The package dewanto-jus58-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-sego66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2704e4140e2bc3bc73eb2a8831d0965c2389db44cffe7210d55ec7ef80aa9476 The package eka-sego66-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in umi-gandul97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79dc416c2795b4f90e94b2c8077e1d818947a42bcf9cc888ddc17d6560835572 The package umi-gandul97-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in ade-sate80-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23ff0c1b2895f09c59b585682c351e6ad679acaad430681119a3741844e68e The package ade-sate80-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in ade-tapai45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e867082e8cc83c0a986d0f3dbc64a31aa0ab8846596a627d9b26171757a1b6a3 The package ade-tapai45-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-soto72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b197dd6dd5c055e11ced4931bc4e9e97f1b6b7eb1dcc0cf101bceac5bef5aad The package eka-soto72-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-52417 Malicious code in tania-tumis49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1333b5f324c56a5d2841d22d282a4d7d7ee09987fedc667bfc4c2a03a99d96d The package tania-tumis49-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2025-19382

Malicious code in bioql PyPI...

NPM supply chain compromise exposes challenges to securing the ecosystem from credential theft and self-propagation

Overview A major npm supply chain compromise was disclosed by the software supply chain security company Socket on September 15, 2025. At the time of writing, over 500 packages have been affected, and the number continues to grow. The attack involves a self-propagating malware variant dubbed...

The vulnerability of the Adobe FrameMaker Publishing Server (FMPS) in automating document publishing and content management processes stems from authentication procedures that have flaws. This allows attackers to exploit these vulnerabilities to increase their privileges.

The vulnerability of the Adobe FrameMaker Publishing Server FMPS in automating document publishing and content management processes is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...