MAL-2025-65037 Malicious code in riana-gandul72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ae66ca3e01ebe05c9ba11fae59e415551a8822a4b8b3391333f526643942a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9729fad4042fe61e0e287fc8f152e72e36f205800ebc06eae4075b79ccc90f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sego82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f078b44553e1977ae4eb7d4fcd66a730469d46246843ad69a3afbc53610edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambalado54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95078e0a03446099cbc900fbb852cd5358eb5b27982122ac25700c533dab704f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65609 Malicious code in tiara-tomat55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0828881b09ff62735626f3e9277842d83558ac1068b91d7b8176c09ff02a73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62433 Malicious code in determined_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69e18fd408c5283225366724482711948653c1b85face039baa9d461ddba96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64443 Malicious code in nana-gado-gado91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebda99f164e3f12deef601dbcd8baae1e9b17ab2d22c5c66f7fbfec3e420c415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63671 Malicious code in joko-empal65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb66cf3606c4fc3be7978ce57448620ef9f3b835afa04aa60272694c8f6281e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63649 Malicious code in jaja-sambalado77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d181031474b04ca8797852c8534215c96065a598968b11c91c16ade6b30ab14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Rockwell Automation Verve Asset Manager 安全漏洞

Rockwell Automation Verve Asset Manager is a vendor-neutral OT endpoint management platform from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Verve Asset Manager that can be exploited by an attacker to read, update, and delete users via the API...

Rockwell Automation FactoryTalk DataMosaix Private Cloud 安全漏洞

Rockwell Automation FactoryTalk DataMosaix Private Cloud is an industrial data platform product from Rockwell Automation USA. Rockwell Automation FactoryTalk DataMosaix Private Cloud suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering an...

Automated Hardware Trojan Insertion in Industrial-Scale Designs

Industrial Systems-on-Chips SoCs often comprise hundreds of thousands to millions of nets and millions to tens of millions of connectivity edges, making empirical evaluation of hardware-Trojan HT detectors on realistic designs both necessary and difficult. Public benchmarks remain significantly...

Rockwell Automation Studio 5000 Simulation Interface 安全漏洞

Rockwell Automation Studio 5000 Simulation Interface is a simulation modeling tool from Rockwell Automation. The Rockwell Automation Studio 5000 Simulation Interface suffers from a server-side request forgery vulnerability that stems from the server not implementing sufficient authentication...

Malicious code in historical_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4122720d02d591e455462e57246455946c3b0838c9ff731f0fc8e43d3644f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8237bd8a625b636c70abb93240c2c69a3519133e9a3a3e9183243e706131217d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19fe2c39f0ab7e211ca80a806de1c3cad7d51f29be394fba6254d7695af127d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61660 Malicious code in worldwide_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84d9a42f7010d031f3f39dc64eedc85ab887704f3a9450a2427e43d98e22b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60626 Malicious code in hot_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba01daa392a06bbedbb5542c10fabbacfdefb8699fee97dc7ccf00a9be01007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57743f151b94dad67531fa8da647593ae21a5af2496bc74b9ff4457f0c618685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca317d3f4010ebf98c1ddcb859e5f72cccd55980b6355a825383105d403dfb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...