EUVD-2025-199891

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config a...

PT-2025-47389

Name of the Vulnerable Software and Affected Versions AOS-CX OS affected versions not specified Description A flaw exists in the web management interface of the AOS-CX OS user authentication service. An authenticated remote attacker may be able to hijack an active user session. Successful...

Malicious code in double-uglify-long-static-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cbddf969fda2c0a80a2252a875d61720e0aa7aa2b2a5725fd102e01d1f0c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185922 Malicious code in buffer-mocha-astrophysics-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19bdb6e5591367013f268343f1513dad33fc681f85b2aef30be47ec269cb5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-crust-acamar-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5355cbd68aac1da711412886e7e3a77b66c193fddd4cfb2ff2a0ed9e7726b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948acc55ead6175abd00658e2d85ccc65c79f1940193cbcb0069b08771f731e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f88034de893bc9831247c92fd60ecd6f80da68ce75da00ad686e4985e80dc62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29026f76a5dbd0897dc49c881194ea8ee2fdb4222613ba76bd871bc19924693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177858 Malicious code in polymer-avof-ahaggafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e494fdb7650acf06974d3d818e662d84f166e50a41fd106ed2db704a30513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177008 Malicious code in nuyar-adadar-baidt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7703b3ca664f377c54de4bc52282ba3607fe52fdee646aae90028a8670f04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac06d8612ca64fbec5f7cc01f0264b1b132694fcb6c894a5b2628e9475789f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aodoanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5aa6f0b089df28367ad39f3e348d36e3f939e9e97e6ff026f1289e51d265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a68326d0eec426a6b349962027895601267885384da04c538c3b37f214ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171723 Malicious code in planetpioneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0ef33dc9ef08fae077c95a1b2d8bf7b697b3ebf87ba6408a871ff726d4aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171867 Malicious code in shaqulbilal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2b1a77dd62da95473834cdb1f4658c9c64c16d4fae63242de42bd56ba7edb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708972f026f574ab3eb49006e63c50a1d1e3cfe326683395cbd6ce0c99601c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493da84c48f8f7c4b2143cfc9860d052432ad97447553991b4c06d9a2cc33e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0f9c62ca015d8bc6075952cb5b2372299ca1a1a69659bb5db2f11140dab08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofafafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c95b7b26daee26bff5eff26c855d513c9302629e6430b919879202f2d1fb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...