MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120168

Malicious code in yakutsk-config-mutation-ursa npm...

EUVD-2025-113905

Malicious code in eslint-config-postcss-loader-ignite-webdriver-mocha npm...

EUVD-2025-113912

Malicious code in eslint-config-event-convict-zenith npm...

AjaxStandaloneVpnClientsController ajaxDownloadRoadWarriorConfigFileAction Remote Monitoring Software Unauthorized Access

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, is related to an incorrect restriction on the path to the restricted directory...

PT-2025-47843

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is located in an unknown function...

PT-2025-47842

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 devices. The issue is due to the manipulation of the...

Malicious code in cindy-tomat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bf6116f4e63e0fca65943d0ac151091f1d3a9da54ba2b2908e83165e8fb595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133791 Malicious code in gita-kembang37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f94a6390e78a3ec1ca38cdfbf1dc081ca7dff695800c0269f65d5f73b7d0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152f443b01c1e534d2fee36dfd403cbd9dcf849eda62d4d8b32fe46d73c95637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138181 Malicious code in yanti-bakwan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f2c9712fc5213b5d8c5756529de2c02f4576a7947541194290b8a5892b66b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125495 Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-dradag75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6d34bb20a56ee1c0898b2a04b414bd88c65fd5693239e09dc3c095e79b3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-wajit56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce72248caf8654513c266dd9504cd53be7b5311e921e02a2de3f73219c84683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gorengan21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54806d9c351a181226bae5aa64f65009b6dc1adc92dbf54ddf6c05cdbd00d4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123140 Malicious code in sari-taiwan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcede57e6be6bde0699bd9d7dfaa16f15431f6f13619cf5fa079ea595507ea28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120208 Malicious code in galih-teh99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c50a3cc73fd27585f4d25f6d4c994b310804b7dc54956c51542cde9b7ba7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116470 Malicious code in prospective_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8184d6210c4e4d2efc51af929d6da4b33ed14e3310c57d18155d1d3174a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ketan88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f101118dd1447989ba8a82413b00b163a667bd643c836f3c70befdc9da9c328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...