MAL-2025-126307 Malicious code in excess_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f489c34a4bb39ee2e8bebf6298aff316985c0d4ec56a0e74098afd636cdf55bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126329 Malicious code in fadhil-bakso93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637541a8c6fa6e14830630d3ae08064f31394ec285b2f81b4091616d42752a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127852 Malicious code in joni-tahu20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b16c1d6dd1f0697d704da9ef2f1d1a342bd6c9403cf1ad355b4f6bd7dd73e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130895 Malicious code in utomo-gorengan28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5247a8388516b403d84dcb903ddd666fedb1a3c0f61ab7c16b21b53f75961c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130502 Malicious code in tart_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0afcb7f5b6bd8969eb027fdd787784c58ec8d8cf71e0dfb4e2e8ea39a76481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125301 Malicious code in candra-papeda6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebd6734cb83eb0641b358f00083df4e6886bf177f04cef0274aad969d37887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131144 Malicious code in wasteful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661ac98a635f9f11bd60f29c37f1b6acc2b894b4b77b0a8ac15b6a66d4f8f5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7028ba6fcbfb8c81b965e2711ac16c96036bda6b5777fe4944b09a0a4041563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bubur49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e1d7858b511a1ddfd1de45becf147f2f25ffbb4efc0b6e5d954d43dc5cfbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ronde82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af2a7926c480cf36d4e7c7e066187964e8ab50384da78d1528a04d6db47d97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129384 Malicious code in political_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512080f32e1a68e9ff62f30764d03c52335074252581ae1dba987a9bb4c2783f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ea17b26cd8e1251c2fc85420814961dff473c1655650e5a9668336fe9b560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99094

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

EUVD-2025-99085

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2025-99081

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...

EUVD-2025-105676

Malicious code in eeriebobolinkz3n npm...

Malicious code in citra-dodol6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802f92b0b77686ed928e2ae9b5f3fbeb07a089592cb571c0d8aa3c7b4536f9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-oblok35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b9fcdc6e858890822e3ff0af4a706aa0616ca4c92a95dff2801e9fae1ed181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-miebogor67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb613ace1120f26d2dcbab0d136aff69c4538609791ecc338e8d38261c846505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bubursumsum99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b01c6748928b8a36fe2147f6e1afc417468ccd9fae1136f3008fcefdb20d90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...