Malicious code in jaja-brengkes43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8223d64a6cf115da7b1dba68f0a6ecbf6cca05fd2d1f271250081d8f56cd0944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neat_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27646aa514fa0365c589df5c8f1a10268f215dea138bfed3b38ff6aebef55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127909 Malicious code in kiki-oblok43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1844bfc924b28801dde5c16d57c5b5ce1fd4d33a6a239ad41ff6d6d9afa57b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521e40d437ef5951da14d09288f51bd5cd68b5ca6f0dba280f645101632b2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47773

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is edited via an AJAX call. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

Malicious code in increased_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be94cd5ad7863473b39bef00030b853595c2f36ef5e3040dd23c4ac26a3ee1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114378 Malicious code in greasy_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c09cba59e1e7fd02119ca91e1d049e6477eddcc60277402232a09e828460cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

vim: Vim path traversial

A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...

MAL-2025-99534 Malicious code in aqflkx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd9ff8d487b1199965871968bb72dd64ee15702ef5df3f354126fa578b37a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110960 Malicious code in wise_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d99db39e87006d6c582cab149c1175f88596f59d20d2a43ac3b7ccfa15d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec69d6f599b19c2276c42dfc100c8191c75ea35ccf98f7b3469eac738a5abe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100285 Malicious code in causal_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9d0e2fac75d42cc18247526279f8c1152168031451cb7b668bcc72ac9bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103847 Malicious code in hunter-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a78a0c333c85f94daf21121c545795e936762826a0854d98ac90208b024d66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gaplek45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91ef124e1afeff8b8d3f4937a339eec710caa2f25915129b64d5cbad4732f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-telurtahu96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15cd6367302777f94cc05b589091321876f82f1264b1052cb7d4ab2f6717f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102207 Malicious code in erwin-keripik7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75629f1dd3d9d7b84865c6398cc013a21e50354744f80ec13b4aba531dc59470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98870 Malicious code in plastic_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a506fd44700f1d602dd8d67204c2cb799f713e6e2a5ac7c7639520a97091fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88769 Malicious code in nervous_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb87889b40115c097be8d22b2e38dcc37c84c66bfcbb837dea4067339456046b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61852217270a9029d05091c9f3e980f0fad1ccc2f8d29c65078051c985b72e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-pecel67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53af48f9d152756db1f736db78368b941ad0e3b8c31d70980eb4ae92c6249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...