EUVD-2025-114944

Malicious code in corvus-puppeteer-eslint-config-mysql npm...

EUVD-2025-114009

Malicious code in epimetheus-nashira-node-config-forever npm...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AjaxStandaloneVpnClientsController ajaxDownloadRoadWarriorConfigFileAction Remote Monitoring Software Unauthorized Access

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, is related to an incorrect restriction on the path to the restricted directory...

PT-2025-47843

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 routers. The issue is located in an unknown function...

PT-2025-47842

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 devices. The issue is due to the manipulation of the...

Malicious code in cindy-tomat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bf6116f4e63e0fca65943d0ac151091f1d3a9da54ba2b2908e83165e8fb595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152f443b01c1e534d2fee36dfd403cbd9dcf849eda62d4d8b32fe46d73c95637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133791 Malicious code in gita-kembang37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f94a6390e78a3ec1ca38cdfbf1dc081ca7dff695800c0269f65d5f73b7d0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138181 Malicious code in yanti-bakwan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f2c9712fc5213b5d8c5756529de2c02f4576a7947541194290b8a5892b66b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-dradag75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6d34bb20a56ee1c0898b2a04b414bd88c65fd5693239e09dc3c095e79b3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125495 Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-wajit56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce72248caf8654513c266dd9504cd53be7b5311e921e02a2de3f73219c84683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123140 Malicious code in sari-taiwan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcede57e6be6bde0699bd9d7dfaa16f15431f6f13619cf5fa079ea595507ea28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120208 Malicious code in galih-teh99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c50a3cc73fd27585f4d25f6d4c994b310804b7dc54956c51542cde9b7ba7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gorengan21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54806d9c351a181226bae5aa64f65009b6dc1adc92dbf54ddf6c05cdbd00d4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116470 Malicious code in prospective_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8184d6210c4e4d2efc51af929d6da4b33ed14e3310c57d18155d1d3174a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ketan88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f101118dd1447989ba8a82413b00b163a667bd643c836f3c70befdc9da9c328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114205 Malicious code in gilang-menjes84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe852e53bbd673a3e41caa5fb42fe200ee35bca3fcedf4295e68df42fb2305bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...