Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6763497b610d4b43d6a4abed8e0b43fd61018d776209c924cf5f2d399a2cc6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

Malicious code in hariyono-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935819c712c9dbfc17936bc12655d0723ae42d6e688e057e30af339a5ebdb181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856109bf653de0007804054a7a79f54cc28155ff9a251783882363e40a4da4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154891 Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06438096e82381636cd6c0104965a7a4fc4ae87e9a92e933051043a0d017b9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b234188b3c0c91039e204068891cca9197efc1ca1dd8e2c73ac112c95139b3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159614 Malicious code in manda-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046ebf01ecd973a2aa35ac3c8daffcbbf378aa0bf70a1626d15543e60cf340c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c880a7e7d8553be64d37461a714d7167955723bec496ba055de68b37e7042f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cbef1eedde414c63b210be73593ac0735322e038e452f163787810ea7b4081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151321 Malicious code in abih-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2b5ea41ca672feeb2c29fa69c27e9ec09052fcaa01504ee20411aa25c8e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155109 Malicious code in fitra-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614facafc357a4df5d3932c2aab6b5a7660b7d7496700597ec3d654e72a4d3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162705 Malicious code in nokire-kore19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a501bc2cd166aa54bff3e6e7509d98e498502b3832b3d26d0714d987adbb532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f726776c700fb192d3c1203a3662c0a7902040d0f394f71971792fe06480f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11578

A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker...

Malicious code in lisa-ronde19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1256ff2d8afb04f88b142d056e9bb2cf7db09685d4ad2cadc64ca45d90139a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125722 Malicious code in dewanto-gorengan19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49c944f9a1363b70270397329745e2a3ba4520c0e2d0ba62831abcb536d89e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...