MAL-2025-108577 Malicious code in sexual_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2c8842bd56d5e692004ae4238b2dd91f0c5ad532cc6fcf9c0baf450cc3e7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in francesca-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d5ae2242fc9cbf629b2938cdfdb2776eb962b4999508c8e1ed48dbb904c8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f427e8d127b6249a7bab6a75daee520d707af415d578b245ea2fb4f5a932c793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107080 Malicious code in pitts-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee782a82903d409c2efbf140fa063150851ee8479637d49e79aa2de94667c2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108157 Malicious code in rising_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108678 Malicious code in silky_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955c323f92b2f4bfd16f9620143a3f7a6193c601fa1abd55aed965ef15f90ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108999 Malicious code in spectacular_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5febc1eb59b8ae539fe0060a7b4ef5ee7b7f36fb878a46374dfdf984caa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109745 Malicious code in tomi-otak-otak98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d222e5d05a6d0e4e3adad31bb2f98a65230c7832084237721908aae5d0c0a38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-botok80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf309da09f99d0bccfa2bc82afca8bfc0ff87830677d137ff5e94a9ebde3532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lodeh72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd20d5940a456d8bac9531728e7b001788c0c0b174680dd0cdf1097ec2453a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29d845c6597d7ffc97c7d72064ace7c76e7ecd246ae088c7c94fd9d9bd37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-saguer57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6997de9710f773943d26b60ff0699c1e1aabb95d45db92e4567adc24bfeede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-martabak50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1ddb60b3683ad8e1f76426aa3838ef7f752ecfe505b4c899b80c86b220499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105659 Malicious code in mathematical_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e060ba15786d7c337fd5b0afe3fdf11548132a8201bca19aa9c3ed5750c043d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106526 Malicious code in ocha-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd73044ece0faf4c67fdc6ef8c10b72c8dea3a99f2b6f4609d59d0c9106fe673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99466 Malicious code in andi-wajit56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ed4940dc9f149f13f22eae5a74c71de5bc8db12fe534b92db50da368b0680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-6779

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

CVE-2025-6779

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

Malicious code in ordinary_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0512eead53dd9235fd1322fd2a46a51e666e9b527aed0fdc48840c55e45e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98235 Malicious code in patria-empal64-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c436eda719bd9fcdd3fb0b877deac4b46aaaf5c648269bb8b4ec871b5b865918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...