MAL-2025-119344 Malicious code in damaged_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea58db6d183d7074f3b5b224f970893f90db224c163fee25f34ccbe5103226fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117438 Malicious code in tiara-sambalado69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86c2bdb4b2702e43cecce71df0cc85eba7f3cd820d2195098c07d68b2232864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcc2e1614a4df68991f600cf3120a4558fcd8086d730564871f1b47a09b73d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tapai64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c668ea28d96f038bc3e073045c1db958e2883b4f5861de7ea53e926959d1b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100700 Malicious code in combative_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2026bb00675c8dbfd010c2cc5dc772cfecc57e3497c8c10d85745556129fe58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109991 Malicious code in umi-mendoan45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17035ca3531c97d5a0ebfbf9cd0f883737807a0511f5d28e77f1271cd3728f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101516 Malicious code in dian-jamblang42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8df54130d4c48cde908bc61fcb458ee91945ba5285d23c53f289e880b252bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210f11a47a17c8f020e2ed994b9e4c28a34c713ae41d5f4f5425fd26622abe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90228 Malicious code in rival_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dc34a89a2e908c5d3c71b12b6cea9da418b1874857582c89c244d69a09947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe48b6f3ab37dca429255a44b6bd34fad91a0552aef4e2fca40dafcdb0c170ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78088 Malicious code in fajar-botok61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bbdd30ee39202f5e2ec0ea1f47cb006f2609d912e02c8e0b16d476339f2d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71724 Malicious code in yelping-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0adaea808eeefa40d8a49244b4e3fd655bde5cf70dc9a02bd2e6a8f66546d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420c75d2215acf6be902987e70981118a70f5fb3a53a412f602bafb2d5330d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sate26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca99b96ae947a6b6c72cac00cf92d344279b0e0632f4301a9c05b51a202e1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56988 Malicious code in jaja-sego85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66295109b74a19a611ddecdd489493f3bbf504828392d49bbe9a1e345957bf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52482 Malicious code in tuti-botok9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856b17c87fc2cd53def56fa62cdc70fd5e86d08b2757973fe20c271f9d0a016 The package tuti-botok9-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51678 Malicious code in eko-lepet54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba52775a0f40c515b1d31dfbc714b254055342775ccd50a4e6420a0cdff0c648 The package eko-lepet54-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50324 Malicious code in erick-klentik99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031df8a5d41c30d389671e0acc91e3bd993807c3c4568e643739fc4392ab56c7 The package erick-klentik99-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

CVE-2025-53880

A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list o...

CVE-2025-3356

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view, overwrite, or append to arbitrary files on the system...