265 matches found
MAL-2025-74142 Malicious code in lina-sambel53-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46e0c5dbaa3b1609e853e338cd7826eede5eefc28c8d5cba329139851ff50e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67771 Malicious code in dirty-peach-rattlesnake (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c06c81ed58df5c7408506eb11b08470186bb8b7df9b38f6098d402f5d226e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67804 Malicious code in distinguished-maroon-ocelot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6971363f2f77caf154260d2cc0d79347c015b6e3d510398e08784974cd4f1692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67850 Malicious code in double-purple-lemming (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f987dd55772f58325989eab3f896c50cb877ac0627ba36c16bb1e22731b33ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lisa-botok44-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bce70241acc096dc391d9434c90e7ccc91b8138763aa57c5316bdd5b77962d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-62934 Malicious code in fajar-sego100-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374fc2ddd115d721cc5849459b746cc7e5110d1aa1f33683e75131f1561e2e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-61442 Malicious code in tart_jellyfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fe2c5b323715d9837161a526ecf1b92333a7fecf9304981cfdff1d2e6a29df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59918 Malicious code in active_swallow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92beb3b96bdbd517f1a27a1cd260df384224d5de5f92d6baa1bea3f3e5c819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-61294 Malicious code in sleepy_flamingo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0ec38379f0c7c096597f84e3c0184b8ef65d83cadadda4d785a7abb9fcca81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-57761 Malicious code in nana-klanting39-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1665bc59317206fd59c7faf31907dda992b41b5152d193d9942a32016735725c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in joni-sambel18-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9660959c55db46bb9b910d88621937be18a713f09c3c93fee4031487bd6aa4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in surya-sambel51-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04f048d93bf252a20b0112553ac17d045d4e1c866a84f540ab309fa88b94226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mere_termite_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acef7b2b9124bcaf6dfac1c29b97b0f3c784088b6e777217353cd463864de41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-58657 Malicious code in silly_ant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b1b70f4cbf46483708bc2b9c0fb09b52c71b2a0ec0b108cee67648a1054d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in candra-kentang61-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09065b7db49b2f4f6008456fac5968d88efa8e9ac9a29da5ac6f9ed077a2f43b The package candra-kentang61-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in vina-jengkol85-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb569aa54f0bada79d2ac32911676673b7404abc289dc291e8bc6203bc2be21 The package vina-jengkol85-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-50267 Malicious code in dono-tek26-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4227f9050b3a59b4a3560a23dc69cd42eb0974afdb3da99598d5101cc0542474 The package dono-tek26-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...
EUVD-2025-37213
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...