Malicious code in umi-telurtahu33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f5b1aec87d0ce1e7fae7027b7f7f238ce1ec6261832b186f4b71be0cf15c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62934 Malicious code in fajar-sego100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374fc2ddd115d721cc5849459b746cc7e5110d1aa1f33683e75131f1561e2e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9e1cc0ac354bbce939964618b4ce39289b73da160710d5a980e6c543e6d543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from improper configuration file permissions and insufficient input validation, which could lead to elevated privileges...

CVE-2025-6779: Incorrect Permission Assignment for Critical Resource

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

CVE-2025-4645: Improper Validation of Specified Type of Input

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

CVE-2025-5454: Path Traversal: '.../...//'

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

CVE-2025-8108: Improper Validation of Specified Type of Input

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

Malicious code in double_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8c0254204f1eda0fc45dd1a5981cfd83ba1b785780526bae3050b671b40a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b498103016176c142f9e9f9561d7cd2725042687b79912dc0e39680e801b932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61294 Malicious code in sleepy_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0ec38379f0c7c096597f84e3c0184b8ef65d83cadadda4d785a7abb9fcca81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59906 Malicious code in abstract_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04e72c86fe424f46ae8faa9cf3ced7a73e6e2c6b1376bd97a601e7afaa0e833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61195 Malicious code in resulting_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d280b1d715748db4cbd730af0e9c02f847a23f07a9a3bc3f11c9dccd9b5a7077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59918 Malicious code in active_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92beb3b96bdbd517f1a27a1cd260df384224d5de5f92d6baa1bea3f3e5c819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60124 Malicious code in combined_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4d32873984a7e5a5dc531b5f87b64b634dd66e00da18033b9b576e94f43641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-klentik92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75e87c18a602cb701aeaba2a4508cd634b61c5339875350f3f8c1f6770163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-gembus45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75baff84ca36bdbfeb0c71dcfa93bf835beec45850cb5a185d63ed9038db0937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambel51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04f048d93bf252a20b0112553ac17d045d4e1c866a84f540ab309fa88b94226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sambel18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9660959c55db46bb9b910d88621937be18a713f09c3c93fee4031487bd6aa4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56934 Malicious code in iwan-mieayam54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d078f3b05a627f5a587f53d2351a55c100290306f61f9a5d3a786c6987b4201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...