MAL-2025-173421 Malicious code in buta-fioana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce44c125f2b1b673e1750ab63ee5ffa15deaaa5b8e4e0447c330023f9f089dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175975 Malicious code in manusidda-nusadsta-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b1db4e4f591048074a2eb9e160625ca2a4986258f8b07c92418e001e17aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177792 Malicious code in polymer-arash-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f838470e7c6e82a8b18dc6854bab4416b79a81276510daa30309062538d145a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177857 Malicious code in polymer-avof-ahafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e24fe6c90dd3b2ee421ec3312d245de05bcc141c8260301681960f1099d6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175628 Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172775 Malicious code in alvino-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143038eb894ba6ef49979d6fdcabd21de2e72e981abe4293887d3c87c3549ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178067 Malicious code in polymer-ids-raaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dde2f7f00e67c97e0c0b7ae04f326a4f5f45c0e1bb1b0e552bcf78bc21f325e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174444 Malicious code in goodain-nusafa-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aade912c227aeb1107b24adb6a4e6f214155c9461d40b1c382c97f8371243b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176871 Malicious code in nuilva-vmiam-rbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e6ac2e88af9d360c884b30a022c28539fd411bdcb65edd462b5e24697a536a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177818 Malicious code in polymer-avoadfifa-abohdoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3385df91a1f3a34b519da69d30012a3d8cd0c4ca6749b5a51244e9e123665fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131934

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...

EUVD-2025-131927

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

Malicious code in augis-pomdoi9r-osaisisac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe8cabf83b8ad599d6ce24365095489d111e11725ba642ba22e52b7056b663c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c9f6a0ada507080a65ee3d441449b1281a4035953e29d4f7de375d48ac54eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiagfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36fe4e7b85f845cd8febcb213286c9eea88642543f7400dd0a554e7692724dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-manaoas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3206ff2099994c25112be63ac5182f2d7b053ade3010df1d9eeb62de8cf7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172321 Malicious code in auis-lepaod-matan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde8b1e89bb6db9374e81bc53f6a6d872ea5d3f202021e8acdb8b309051dd3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172584 Malicious code in verts-otimo-nagfigaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e706f0c4dee8391702b9e862ffae3009f2be52a1aaa07e69dc704f151c7abaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172403 Malicious code in hereis-manuic-tauwaranaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fe8f2e31727acd9335436461fb4fca4a12f90d4f17d3512eb3a42a77321545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172527 Malicious code in verts-otimgo-nafgfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a718c7530557d25d20e5fcfc64d03f0152805d2d49b12717d85335e4c8e9b18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...