470 matches found
Malicious code in growing-cyan-condor (npm)
Source: amazon-inspector 420521703526d241e3712bf1a024b82445898a2b6c756c8f0f65051d386f21b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in disabled-azure-condor (npm)
Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in chronic-coral-condor (npm)
Source: amazon-inspector 9d4931b4a1807a1b26691bdcf83ba097b550142cbef6119c4a9b112df4fc32d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in agreed-coral-condor (npm)
Source: amazon-inspector ef426eed46a2af7ce87be9dc93999ca42439d83e87e1b9fa9f87b4446b542b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
@condor-labs/metrics (>=1.3.0, <=1.3.5), zation (>=0.6.5, <=0.7.0) +3 more potentially affected by unknown CVE via node-os-utils (1.0.7)
node-os-utils NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-os-utils and may be impacted: - @condor-labs/metrics =1.3.0, =0.6.5, =0.7.4, =0.2.2, =0.2.3 - zation-service-nodemailer 0.1.2 Source cves: unknown CVE Source advisory:...
CVE-2025-66433
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3...
PT-2025-48384
Name of the Vulnerable Software and Affected Versions HTCondor versions 24.7.3 through 25.3.0 Description An authenticated user can impersonate other users on the local machine by submitting a batch job. This affects the HTCondor Access Point. Recommendations Update to version 24.12.14. Update to...
Malicious code in rude-lavender-condor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ee9543ae84cb84e1102f2a5721a396b7b8b264dda933eaa89511a15c2fa677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117493
Malicious code in chronic-coral-condor npm...
EUVD-2025-117224
Malicious code in modern-cyan-condor npm...
EUVD-2025-117221
Malicious code in musical-ivory-condor npm...
EUVD-2025-117114
Malicious code in rude-lavender-condor npm...
MAL-2025-138878 Malicious code in modern-cyan-condor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19fbb2801752b03d483f9540b0ce95aa3b83204d042ccf9d3da684df398a418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lesser_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9be828de2415799a3966e884056eb687b59be474182703276657bd2e6220915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136739 Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136882 Malicious code in secret_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a413ce836db767a6fa4d7dd39e1599b88a33c4b84c073ac347886b56b516251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100771
Malicious code in charmingcondorz3n npm...