Malicious code in gita-mangut47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d537026d69dab5819e714bab17c6d6f45efc3c0d65f1ff29634c7f19ceb821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126050 Malicious code in eka-telur66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e35778ffa6ff83d695598992a5b974abc6711474c910cb9cd95847c4270952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-nasiuduk58-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9400fd5e19283e1d12c8ee2b5b7dc082b644d55b9edd6e22fe8de496991e4909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129604 Malicious code in putri-soto29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a034d43565bfe8f22a91b09176ef3496097f0fa14a13bf10fa17852314f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126316 Malicious code in experienced_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a87b0356a4a1103c20d2455ffcaa049314fa31e36086a692cc0d0adb631e8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123340 Malicious code in sound_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aa25ca51a8b350937ed927a7724322879a7881d9c5841eac02c7c80d048a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18ff432316b541804e1b0265ab1467aa34b10638c04bccd169ddaeb4f04aa98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118646 Malicious code in agus-lumpur45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ea1451f6040df4f82879027e0b8b506e8e3e8fd78debbe850bea10d17dbdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Malicious code in bambang-mangut34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3503ec957b3af35a63a873bc2fa1ef8990df2d5425794754127106d6d406b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-botok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fd5c8997fbb243718852fcc8de4224825dfd67204333692e6645e258d96a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110230 Malicious code in urban_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103505 Malicious code in hadianto-peyek97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d46e09361bba2a926c265374c536462f407897af5e22d038e1b5d8daca529dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-getuk13-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd6701c79a57f3be750bff1eaa7bb97ad1e8e59854320c62050cd8b08861da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85958 Malicious code in gita-kripik49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b88b563123121c427499334f63059d0b4084ddee5013c89ea3d6dee7ed840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-soto68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ee55462b36df27b6bd42dda2329f65834df5e66b8fdbe3d875a09687808d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80560 Malicious code in parliamentary_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc6fc3392d4bf45e212e5c4082be0182dcb8132bb52659aabb3e4111a5bf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...