Malicious code in aimannaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9651067ee4c087b5655f869d2183635e292d7ab22b1e6fef7dded056896237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ateefshaikh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375460ec892febffb550010b8ae5ed22c7067e3ae435152cdbd35b77a50bcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joshuahoward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cce4b043163f50039cd2ef6b1fea715d095a229d5b72e3c54f2a1ce9b774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170872 Malicious code in amjadsamra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a64ee4812e7ca68edbd6f26837edd41f8059597bb634f8be5014be7041fba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tariqmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cefa352c6f112e00d9be0ac33a0b088050ec25b7818e6963fd73169c6d65f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171643 Malicious code in nebuladreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364c5b68e86877472b633a25642d7c31961f8e2a54dfeb6f9491ee4caa5e56c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170762 Malicious code in akifabid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9957984e554535add547b3f8eac586b0804f2ea9e3411b82b3c3a888df96e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24519

Buffer overflow for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially...

Malicious code in tadashi-ytu-nama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ce56428a021dd52ae11aa8026eac08967f6a62abfd668880272cb1fd220e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afded46446dfb0efee0e23d16389c869040ee1c346302a8a0526ac11bce6a4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc00fc3ff21eadd02118c2bb68317eea1c5cb49457c7881f2dbc4a26532b1b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagias-ifadifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1632606bea5693c428d584f4748d2144161e0695cf794c96cb203ffb061e7400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-amia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02b93b865bd878102d3a7c8d96e1334f933cec47db7be1b12257f8f2b4d131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadt-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e711253d9dce68f2c32cd02c1ad57c27d764ac3b38abaabf08835f84ae3f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikuk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a839ed52803036cdfe870d7d413a5427d83061600dead9f4be0ec340286e2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d0d760ca3b3c90a6341dd57f909611ef2b79de32da8c0a687e0473d3e8686f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-taila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b8f24d989798f4fbd9ced8182b0ce214ddcb3bd1ffb38d5fff182f3b93ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...