Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e905ee031b2c4ef7912618f1d64a99f35e6da479055f1504c5b29a0adaac500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189232 Malicious code in rho-mu-catch-double-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2ad1e3def43f350a2696c66f918e07254dd687bc10518a3202abe7539570a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Improper Initialization (CVE-2019-19126)

On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for...

Malicious code in goiy-ng-gufaguaguaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99fe4b884f047aa23b6688d9246391637e01df6d89f59fdc568447c37c866fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f08929474537932dc80c444136c187398bdff543d264e0b503d48dd3e2c26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179753 Malicious code in kiut-acog-aef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4aaf6a2e0fdc7a58f138e94cd93846451a9ed8c4345ad429aaa3635526f4f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576cef02a062cf4eaab44100af0a0f5df0c8d84187cd2b9a149534202e67bd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7947f3abd4e6a7ed0d255d016ff7b79e3677fdd18920188545b0529b0b99c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174341 Malicious code in goodafin-nui-nutuygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8070e46baa68e0f7081370ee773534340e624b70d4b826a0230837f0bcab7f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178614 Malicious code in sahunim-satudui-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb5d9642f63e7f1bdc5bdf05c0323c116eacc69bfd09eed7bf840b7851f5d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176165 Malicious code in miusan-faud-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f9d866572064c6a43b943b8200610cd1ec30ff7f859d0801881c272d9a790d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rafiqhassan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914f68b4becd8f47948063c835e2ac9f7db5bd48fc0286dbf9d3dc7e33da3c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171631 Malicious code in nasirqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485b8466baacf5f808a74021df6792658a5c0e536ed3f28fe571816771a6f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162947 Malicious code in nokire-loklok89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ef21a87bfd62e56fe2128b65f25d571f2bc902a49677bb8d3b6d48412342f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155640 Malicious code in hafiz-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aae805180cbe28341f6cf24d16ef88f09e5a404725f9bcadd3417401e21ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adgmifaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5be06952ebce81287161ad0d2f8744f49a103b35ac956781bb9d17fc995a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af727aefc9a7460345bdc06c6396b8a6d0d6e1551ba7ecfb6decb08413cddd15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ds-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1c13ca806fc4dbf787d2878ab7a74366663c9635732c3c0a33ee6341b8090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...