Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e905ee031b2c4ef7912618f1d64a99f35e6da479055f1504c5b29a0adaac500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Improper Initialization (CVE-2019-19126)

On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for...

Malicious code in lomi-fus-ufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f08929474537932dc80c444136c187398bdff543d264e0b503d48dd3e2c26f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goiy-ng-gufaguaguaufafci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99fe4b884f047aa23b6688d9246391637e01df6d89f59fdc568447c37c866fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179753 Malicious code in kiut-acog-aef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4aaf6a2e0fdc7a58f138e94cd93846451a9ed8c4345ad429aaa3635526f4f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7947f3abd4e6a7ed0d255d016ff7b79e3677fdd18920188545b0529b0b99c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576cef02a062cf4eaab44100af0a0f5df0c8d84187cd2b9a149534202e67bd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174341 Malicious code in goodafin-nui-nutuygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8070e46baa68e0f7081370ee773534340e624b70d4b826a0230837f0bcab7f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176165 Malicious code in miusan-faud-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f9d866572064c6a43b943b8200610cd1ec30ff7f859d0801881c272d9a790d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178614 Malicious code in sahunim-satudui-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb5d9642f63e7f1bdc5bdf05c0323c116eacc69bfd09eed7bf840b7851f5d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rafiqhassan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914f68b4becd8f47948063c835e2ac9f7db5bd48fc0286dbf9d3dc7e33da3c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171631 Malicious code in nasirqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1485b8466baacf5f808a74021df6792658a5c0e536ed3f28fe571816771a6f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7db8b4e8b722711233de1e03793e6703d1f5e99a249a87635880f8a5f052f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21f82ec7b11813941d86bbbe32cc227cbf0690ea2db6cba5c5c9fff097d0bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af727aefc9a7460345bdc06c6396b8a6d0d6e1551ba7ecfb6decb08413cddd15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156849 Malicious code in iqbal-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275c517be61433fb5b93a8548bdac83bb7985d2f71572bd12dacf0cb3a07bc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150055 Malicious code in @mipta1/ijahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1e40db3fd81f97d45845e5ce4c845ac909d16fab9405bdb6244f5b0c7a8833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...