Malicious code in francesca-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d5ae2242fc9cbf629b2938cdfdb2776eb962b4999508c8e1ed48dbb904c8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107390 Malicious code in proud_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15eec51e081448bd7b68d46e8383ec5dccbdb680cfd8756872b02faeae14a402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107080 Malicious code in pitts-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee782a82903d409c2efbf140fa063150851ee8479637d49e79aa2de94667c2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108678 Malicious code in silky_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955c323f92b2f4bfd16f9620143a3f7a6193c601fa1abd55aed965ef15f90ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99466 Malicious code in andi-wajit56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ed4940dc9f149f13f22eae5a74c71de5bc8db12fe534b92db50da368b0680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lodeh72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd20d5940a456d8bac9531728e7b001788c0c0b174680dd0cdf1097ec2453a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-saguer57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6997de9710f773943d26b60ff0699c1e1aabb95d45db92e4567adc24bfeede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-botok80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf309da09f99d0bccfa2bc82afca8bfc0ff87830677d137ff5e94a9ebde3532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29d845c6597d7ffc97c7d72064ace7c76e7ecd246ae088c7c94fd9d9bd37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108999 Malicious code in spectacular_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5febc1eb59b8ae539fe0060a7b4ef5ee7b7f36fb878a46374dfdf984caa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109745 Malicious code in tomi-otak-otak98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d222e5d05a6d0e4e3adad31bb2f98a65230c7832084237721908aae5d0c0a38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-martabak50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1ddb60b3683ad8e1f76426aa3838ef7f752ecfe505b4c899b80c86b220499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106526 Malicious code in ocha-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd73044ece0faf4c67fdc6ef8c10b72c8dea3a99f2b6f4609d59d0c9106fe673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105659 Malicious code in mathematical_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e060ba15786d7c337fd5b0afe3fdf11548132a8201bca19aa9c3ed5750c043d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-6779

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

CVE-2025-6779

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces th...

Malicious code in ordinary_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0512eead53dd9235fd1322fd2a46a51e666e9b527aed0fdc48840c55e45e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98235 Malicious code in patria-empal64-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c436eda719bd9fcdd3fb0b877deac4b46aaaf5c648269bb8b4ec871b5b865918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e932f84e668e080dd1b29492675c395f62bba8428962e9146ff35f522edb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radical_hummingbird_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049fc37b821776c712c6c1e78dcee4ff9da4b78f5e062054bc85e0b22bf1f1c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...