MAL-2025-185453 Malicious code in analyze-meta-error-chi-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38af8bd8e647f4b19c41cc9074e2ad04540c78db7931d6d32f603a36b415cec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187726 Malicious code in lambda-quick-monitor-optimize-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31413bacc2a8d809baaa17d8864f2dd01df960cc2b18b4f74b66136f795d7828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188798 Malicious code in prettier-meteor-mineralogy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db2695a262bc6e69c6034c20bc2c7d9eff61f2b332c8b08bb2467def0f247e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188193 Malicious code in nconf-superagent-public-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97e6a99ef4d4ea1eec31bae5a51dfc4a5fd76dc8846b55e83fef3e1f6719356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187525 Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189925 Malicious code in throw-bad-orchestrate-analyze-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7886aafdc1134f17a171cbf56c87c0a322e52665e05ce9712e28c73e51ac95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190123 Malicious code in user-boolean-info-decode-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5255d33f074e4f791a5dccd9e6d57315c6fc8883da3342c9b4a0a9ca8c5fb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187658 Malicious code in kappa-lambda-bundle-omega-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3516bb36d404921aab8ace5bf2b731d171a18c77988e5770e5d3d3db842d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186469 Malicious code in dagda-ganymede-fornax-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187687 Malicious code in key-tree-cron-serialize-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff78953ae8c70b79b3faaea4d21dacd0a7182c0942619a5916fe974dfedf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187506 Malicious code in integer-tau-chi-alert-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1cd603c5c21adc708209a0d027df10f306c25f9a5154091584ea043d57fa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Improper Restriction of XML External Entity Reference (CVE-2017-7375)

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher- risk attack surface in libxml2 not...

Malicious code in astam-ift-daba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e1802b587573b6f642253a25cc6d9fd55d00c4e10503f8f218ae6710a17dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilvaint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4363fd0cc7c3fd6f249c3436d330ca93e0a870d6de65cc3dd122916930c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-balmila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c1285e03949a00565f1b084593ff126808a620eff8b9895f6afacc7420c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avarag-obis-bidabiala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0340cc31f16f104495847841a7843b4602b250c4b803e603b8ce0845edf4078d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iltag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b656d74e1d3869227cd57afd89e2feb5e5721280b2e652b6e816b915b6b0d682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...