Malicious code in opposite-sapphire-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c6713bf51b1df163945ba00c5303080b05490fb1610399ceef7639e574369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117215

Malicious code in naughty-azure-mink npm...

MAL-2025-138774 Malicious code in hissing-silver-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522a8b5b9ad0e1e4926c447833fac5958ed81476318ccd064918aabdd03d0795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138735 Malicious code in frantic-jade-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871ff4bf7f1912c86b6eea0dbb591b4c79ddc2d597214547be64a5fd0178ec17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139036 Malicious code in standard-beige-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4badc0df98773cee9b3f296eb35c957010413dcba9bf6de5feb51ea0f86fb384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138972 Malicious code in relative-lime-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0572147dd9d662ad4edc78ec7b74de29756babc7d0819322f02adb3227566f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138637 Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-red-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83af9ce25050bf919491c1e59a75abe7930ebfb615bbe747c921639bbe3270cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-blush-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfa08507cb42efe388d7f23747871107a7ab80f9f49e1ad6fde93e08d732c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117306

Malicious code in inclined-black-shrew npm...

MAL-2025-139085 Malicious code in unaware-black-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93110aaf098d52d787512c3c81f3d40b8d4d47faf9aa46ed8672588e2f65f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138948 Malicious code in prospective-olive-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e41a01d75aabd881d51182d2d1dd366ffa745cccd7eb2e7ad42a4f8efe19d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138633 Malicious code in continuing-indigo-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea3439682e0e132103b64886a2e03a67d03fa0047485ab1d2a2d784ce5ccea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138906 Malicious code in occupational-amaranth-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dac78f5970a488917285472c72c67ff53a0c90384e403cb076c30578a0e865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

Linux Distros Unpatched Vulnerability : CVE-2025-40157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller When loading the i10nmedac...