EUVD-2025-137531

Malicious code in polymer-ids-doraeagaf npm...

Malicious code in polymer-ids-dorgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc24344f80327cd8a99203e40ddbbcbabd9cb3942acd33e56542fb9ddbd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137527

Malicious code in polymer-ids-doragaf npm...

EUVD-2025-137525

Malicious code in polymer-ids-doreagaf npm...

EUVD-2025-137515

Malicious code in polymer-ids-raf npm...

MAL-2025-178062 Malicious code in polymer-ids-doraemagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90770538b2bb53f16e1351781c02615f5362528313f9c86e2ceb03d80c210ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-doreagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3897fee034dbf03e564dec87e8315ecd1e3f47b08e9413ff098cd297a7b837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137521

Malicious code in polymer-ids-drgaf npm...

MAL-2025-178065 Malicious code in polymer-ids-dorgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137519

Malicious code in polymer-ids-raaf npm...

EUVD-2025-137523

Malicious code in polymer-ids-dorgaf npm...

MAL-2025-178063 Malicious code in polymer-ids-doragaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856e8539e3333a44708b8953e24cbc44a95f38ae2cbea869ccbdd6f7ed7c3149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137517

Malicious code in polymer-ids-radaf npm...

MAL-2025-178070 Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178061 Malicious code in polymer-ids-doraeagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705be2035e20d0ba344828867e5b1e6dbba494b6ec2cf7e3ad542820c52fff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137529

Malicious code in polymer-ids-doraemagaf npm...

shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

A flaw was found in shadow-utils. Affected versions of shadow-utils establish a default /etc/subuid behavior, for example, uid 100000 through 165535 for the first user account, that can conflict with the uids of users defined on locally administered networks. This issue potentially leads to accou...

shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

A flaw was found in shadow-utils. Affected versions of shadow-utils establish a default /etc/subuid behavior, for example, uid 100000 through 165535 for the first user account, that can conflict with the uids of users defined on locally administered networks. This issue potentially leads to accou...