EUVD-2025-142843

Malicious code in buta-fiuaoofoana-inafa npm...

MAL-2025-175327 Malicious code in kapvino-sofgdi-uaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcff5169e12d0c430aca4d3c8a48a47ada9118edbbf0675e321f1b2bc95703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175435 Malicious code in kapvino-sovni-fafskfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf941c78e3cf87c4d7524724aba5abdb1443735b38ad5e12ac3daa8d1ce25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175826 Malicious code in kupaio-ulokia-jakaofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ecaa3adcc0200e65a901299d373aa8e3410ae1bc75126c4ad3ca86ffcf6290c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177818 Malicious code in polymer-avoadfifa-abohdoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3385df91a1f3a34b519da69d30012a3d8cd0c4ca6749b5a51244e9e123665fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6275af897c19dfb4443a4b10be3fefa1fa3af6450960765f5da5f327974a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178835 Malicious code in tauhur-sofi-diharurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e419b6dded021774919bf4fd1bca8aba79d3c15628390625cf11039c01a8603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-ragadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285768ba1e02fe80f9498fa03aaf026ae96add312bf14b408194ab141f1fe99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d3ae7e37f89dc4de1c1f358b4fbd2856de89c9de6fd8fb57d089d68bafee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175760 Malicious code in kupaio-kulka-jalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f6e486fda5a9076f332dd9cedb0033c9f4c33cc7b2dcfcdda6a89f65cfb7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173399 Malicious code in buta-fbobna-gadif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a8341a0221793df186d74804958bc3ded99c32624d569afd1a42f37cf4afcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175661 Malicious code in ksaki-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712d1385d88ec91f5f5087917d32a126021130dac291f46b688963c77293a9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174361 Malicious code in goodafin-nuig-gii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb9ca1bf5a694f2696530d4968890f3823889e5a6b47a0ef1c90f7b58b6d9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131934

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...

EUVD-2025-131927

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

MAL-2025-172339 Malicious code in guide-maia-ubalimaanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73758569220bb2ddd8bc0a14f6de3c07dfeb4e659d6313657699b52398ec7f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172440 Malicious code in moneys-mia-ainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd21dbb7aeef6e584e8979bfae84c1b37da24d9eb56b0abbda0be6f13fde6db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172324 Malicious code in auis-lepaod-matanida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1cd70d8a7a1759912bfdd7bc7e101f610c6ef9cb392c468fe7ca611f55fe2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172584 Malicious code in verts-otimo-nagfigaokfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e706f0c4dee8391702b9e862ffae3009f2be52a1aaa07e69dc704f151c7abaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172166 Malicious code in aps-leod-nutafyadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24e9548ca6d6bb09d6b1e3cc09d7a456e2755207cd0841e5916a3d5ac4895da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...