MAL-2025-186055 Malicious code in centauri-troposphere-umbriel-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffce901f46d32f0a4d9a884e9616143978c7422b11aa4e4a6c562b461995027f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-sails-selenology-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f0910172b210dd6224affb0c347ae9b8f4c3a38904d99e2133ff82b3f9f175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mu-slow-star-promise-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9206eff6650a994f2c98e32fadd91c33b7fc08c2063ec41f3f3306a68044cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-eslint-antd-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09b41ae985cda899d985058606ef63413008d232b4ee9a9dcdea6bedafeaac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-mui-neptune-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136b3090f7d6b067b36297ef6ebb55a84557fb83a4e61d63cd6cefe4a117bd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-apollo-decoherence-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf551a8a06ecd6a92721cdb0801dcf865ffc04b38a01e16d0c850dbdb17c9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-spawn-selenium-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577b28c0b18bb61c9dd2efacf6fc2620489f0e87c664c1ceb83b6663cf92d7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Insufficient Entropy (CVE-2019-15847)

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

Malicious code in lobac-ubb-afayoruaganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a90029c815983ecadbd7bfc4d777053cddfdaef8458630b4bd84be31d0034a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ebee3935852e4cffac0aa223a8e89f33ee2d011afe4c2fd40163ba7d1b8201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gsisofait01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360faab652e6b1eb0a0d9c1e216e90c743b46486f07d179154f38ae5bb46a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokk-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a40ae82e9fa02799c989840e6911e64d31afa5c0b8e3f9e99e2a5cce9e68dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc388fb6de465aa81b4008ff2eda398c33eef0bf03fdde8173048c649d42f3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugugfafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608251dfbb42e646c25a985771a29be3cc83bffffae79adad4db3f9d0dd0bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b337272a9e1a0a478ee7398da30d02a3ecfda9c3f50254de940ce6164b7744fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kiat-ibudarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8065db43a1366dbdacd6cc550f22109860a6cd1d24c8114c50b0981117066d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavufiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e2c7e2fdf2caa9aab473a8df8243ee2c9d93f6cb673ea57bda30575ad89a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...