EUVD-2025-180149

Malicious code in bad-hash-shell-interpret-compress npm...

EUVD-2025-176596

Malicious code in root-fire-user-hash-static npm...

EUVD-2025-178600

Malicious code in hash-char-new-alert-sandbox npm...

Malicious code in daemon-epsilon-hash-link-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247ea1f9679d0a4af4536122840c9b4be02d663783f7a7a4e4a006907deb9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178595

Malicious code in hash-warn-async-private-shell npm...

EUVD-2025-178596

Malicious code in hash-uglify-cluster-info-orchestrate npm...

EUVD-2025-178790

Malicious code in gamma-integer-hash-double-tau npm...

EUVD-2025-179682

Malicious code in cold-mock-daemon-hash-thread npm...

EUVD-2025-179252

Malicious code in double-benchmark-pipe-hash-virtualize npm...

EUVD-2025-176143

Malicious code in sun-cold-upsilon-deploy-hash npm...

EUVD-2025-178906

Malicious code in file-sed-hash-xi-sed npm...

EUVD-2025-176729

Malicious code in reject-await-hash-try-try npm...

EUVD-2025-180440

Malicious code in analyze-abstract-hash-code-iota npm...

Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180522

Malicious code in abstract-hash-key-report-load npm...

EUVD-2025-178597

Malicious code in hash-test-interface-emulate-file npm...

EUVD-2025-178599

Malicious code in hash-socket-slow-debug-interpret npm...

MAL-2025-187281 Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63666

Tenda AC15 v15.03.05.18multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to acce...