CVE-2025-64057

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and potentially modify the system configuration or other unspecified impacts...

EUVD-2025-199891

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config a...

PT-2025-47389

Name of the Vulnerable Software and Affected Versions AOS-CX OS affected versions not specified Description A flaw exists in the web management interface of the AOS-CX OS user authentication service. An authenticated remote attacker may be able to hijack an active user session. Successful...

Malicious code in double-uglify-long-static-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cbddf969fda2c0a80a2252a875d61720e0aa7aa2b2a5725fd102e01d1f0c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-crust-acamar-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5355cbd68aac1da711412886e7e3a77b66c193fddd4cfb2ff2a0ed9e7726b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185922 Malicious code in buffer-mocha-astrophysics-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19bdb6e5591367013f268343f1513dad33fc681f85b2aef30be47ec269cb5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f88034de893bc9831247c92fd60ecd6f80da68ce75da00ad686e4985e80dc62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29026f76a5dbd0897dc49c881194ea8ee2fdb4222613ba76bd871bc19924693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac06d8612ca64fbec5f7cc01f0264b1b132694fcb6c894a5b2628e9475789f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aodoanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5aa6f0b089df28367ad39f3e348d36e3f939e9e97e6ff026f1289e51d265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177858 Malicious code in polymer-avof-ahaggafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e494fdb7650acf06974d3d818e662d84f166e50a41fd106ed2db704a30513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177008 Malicious code in nuyar-adadar-baidt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7703b3ca664f377c54de4bc52282ba3607fe52fdee646aae90028a8670f04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a68326d0eec426a6b349962027895601267885384da04c538c3b37f214ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171723 Malicious code in planetpioneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0ef33dc9ef08fae077c95a1b2d8bf7b697b3ebf87ba6408a871ff726d4aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171867 Malicious code in shaqulbilal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2b1a77dd62da95473834cdb1f4658c9c64c16d4fae63242de42bd56ba7edb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-shout-current (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6309af85ac43ce323e7bc64517950d273299ecfb8ec69353c1bf3b9a76b4580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-madida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9740a6dddc8b5b084478bffa8cfaa6727e0b760e51f5578138b9379a23b5880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...