MAL-2025-158304 Malicious code in lookingan-konami43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf714202b51b99aad16d2eb01f8b4d417ca92e07260729b35a1b734032c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160225 Malicious code in matane-r-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b994492f8518e2a2663fa165fb6e1f34640c086a6dd06bccb7f6237f53ba0b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149958 Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165394 Malicious code in sabua-muhyu-tana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18a7da12878b8038eacf08b231dc67468cd5551ad693c46df1a2290244b6669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159035 Malicious code in mahnud-magu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e425cf15fb78a109e9818eba5a1c46ecb9c5a457708878ba7fe2105d34bf4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159764 Malicious code in mansila-iala-maonldauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e5fc3daf142e244a356cf2b0818145e6c585647e682c70b26d4547feaa70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166400 Malicious code in sunderl-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdcb8a49241cb672dcd231303c106f1d1b3c0fdd0aa07c4387053e70603c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545a2d35f69cdc2d04d0a8dae1c2d7eb4096bc0af1e34d022dd48f026ff4ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154612 Malicious code in dian-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528c488b13591ca71ec96a76fcee462fa09feb4f3e05acef3289e68c2c12f950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sifafafgiama-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f51c49ba72f1ca46ecee07ab15fd25cf66b3823621f9872721030aa76e8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c4370d6e67d863d5f244f34cadba40b5ebd4186f563e33ffbad73fdf217534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151636 Malicious code in abuyilbani-nikubamia-luyahuamubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dee6fe19abf9406ffaed51169414831c7b34ecd54c47a3cc19f8fb1d79d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1afb4e42e47f9a8a61e29e3535e3182be821b384169ec0b474b761b2873f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-knni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1945bad686660775c4eb95b5bb5550065f22e1ca071cc23a3a184f477b3e77f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sif-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09b1a10223f7105bc99eb8d82fca9e28afbc8b193c462f44512899ea457175f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ddc983769eefb438f9559056140c73efd21a88525cf0cc4c201333e416cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-marimasa-nutat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4232a11ca7828ee10c2025c7dbe334b5a00b27d8c4a95c71fed8ca76981299e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9223

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...

EUVD-2025-124960

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...