Malicious code in eka-mendut85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a943cae932a28996b3da70e94209e9f57f2df47fcc4172864ffce926341e7c The package eka-mendut85-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dian-miebogor16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684f6396772172c03932a0e0643476f279c1c274feba8ef63cc37fb20a5acb2 The package dian-miebogor16-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eko-kupang18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e16b486b1287475bd6552011a56e541d98eeb549bb7c4c3030379e85e55da8 The package eko-kupang18-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in andi-takokak49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a35bcb3f4dc59af64d5b969b0d90fcdd89b90f9197b84562781b11397ef0d6 The package andi-takokak49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in vina-bakwan70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386d24dd56329990b548ff9622aff81472eb153cbf89f31e0708003cf19bbf9 The package vina-bakwan70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cindy-sambalado28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ce7e6b3d6e1832f308e35ba04f5e82f991b14b9c204105def4efc1f4a331ec The package cindy-sambalado28-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52471 Malicious code in tomi-rangi60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002cced94b8254267863ffa070ac3ebe5bc8edd461f56cab8712605b194f5c13 The package tomi-rangi60-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50913 Malicious code in bambang-papeda9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ace52aa73c57f03253038f8042bf4eb23112e3a219f24574b720f6ff129765 The package bambang-papeda9-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51166 Malicious code in budi-tek69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bb84fd2547b9ccf66d67a4368c6de423571365c719a0259f051af4cf3d279b The package budi-tek69-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50354 Malicious code in erwin-tapai13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73680f388ef27c6e94a014442ede09a45b412b272911325e98fb2f4f7b223452 The package erwin-tapai13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in cici-teh80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9aa2a3b7fdfce13466241e4c8c614d9e0c99c6449ae7044f493c95c2d01d02 The package cici-teh80-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-51628 Malicious code in eka-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e25ae2aa8ae46ca0c034a57beb6a696464516cd86713c468da561dbc2ffedd The package eka-donat34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50590 Malicious code in umi-getuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed6037001657abba9681e30e3d9dc9a18b23c11d92839f97af0d49f7033cabc The package umi-getuk88-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Shai-Hulud npm Worm

Shai-Hulud is a self-replicating worm targeting the npm ecosystem. Once it compromises a developer machine or CI/CD runner, it harvests secrets and uses them to republish itself across multiple npm packages within hours. This advisory holds IoCs and further information...

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2018-8048

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...