97 matches found
Malicious code in quiet_bobolink_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb933fc3f5274e1b03b6b319db8ab2b600472e5519ef1326f8c64b5a284626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dono-ragi93-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b8d507ea7fe8d72162747dcd747a4ef8487aaf984637763c042be5b570db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-122737 Malicious code in qori-brengkes55-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4835a0fa1fad1bf020d6a3e6dceb4410eaeca12d1f4f35938c9f100793326c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-119359 Malicious code in delicate_wombat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8955ae56d5ed66622d5badecc3d412cc02a3f47198855f15f5b91fc1ad5072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-121217 Malicious code in kiki-ongol-ongol61-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d1d4a314de7b58cfa823885356e33acbcaacdbf82dc28688a71bbe1e10094c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-117089 Malicious code in sinta-sambel10-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31729a523b51f86c4b4ee2582d9fdda714a71f1cecd7d4989a7004f9386c21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-113853 Malicious code in fajar-kepok77-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55b7c73c96afd8fc7f762e7663096602ce5be67b59d5a02730ff0eec1e494bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-94934 Malicious code in immense_pheasant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a986c376900c6b808d6d3dc576eb6176e334c868a4ab8cb2c51be7799259d24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in galih-rawon69-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c41afd72f923058d7a6fe84a63acbac279d0b424850f9f53afbbacc61e61af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hanafi-oblok5-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483348175ca7298c6515178648b94d5667ddd65b4de99df04f4e04dddda9d48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-85004 Malicious code in eko-ruwet3-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266ecfac701af4b3b4c87d9c21a6db2e2f530145b4fd3c2f66e27bccb34c9bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-75504 Malicious code in siska-sate31-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413fd26dff142d8144bac381008c637a825cb7770dbfc61e322374d43b6f2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in appropriate-brown-anaconda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b154cfffe95dc6b5e63369316d70e759facc82addcf4111b66a2905826cf33d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in arif-bakso98-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409db879ef147fa342bf30fd6bb53fa182143ecbeaf9f04d827aebdb6986fbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-63508 Malicious code in inevitable_moose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106d8981aae995b080c3f1f98d168e495af1db22982f807333fbe47eb1179f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in raspy_grasshopper_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39350c67d96741cd700dccfaa46c51f951f00a5db169b58c8bffd13fd0c0c39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zul-gorengan70-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8daff3b2d2f6641a33e4dded724d52c8e5bdd39c117c99e9d15d21512023b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
CVE-2025-59957
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...
