Malicious code in eka-mendut85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a943cae932a28996b3da70e94209e9f57f2df47fcc4172864ffce926341e7c The package eka-mendut85-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fauzi-ketoprak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb77c32363789efa5cbe894fe14139d0248e9d388c39443736d62a3bb0224ea5 The package fauzi-ketoprak10-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in cici-miebogor56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8742b9ff34ebe894f83171dfae6ae18d0fa20b0a6db7b0b392115976817b81e3 The package cici-miebogor56-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewanto-wajit56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebc6111c05530b0d372d923ff80ce58f99b01f11d9e6d3c918ad8b607637213 The package dewanto-wajit56-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50475 Malicious code in gilang-nasiuduk21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aa231b321e032b7c414bb9efa8772483b8dbdfa21df154b6aca7c56998f56f The package gilang-nasiuduk21-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52654 Malicious code in vina-keraktelor17-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf20e9698dd372299ab46c8d90da98e4ad6634059600abb55bcf04832d2769b2 The package vina-keraktelor17-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dewanto-tahutek40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46743d96f50c8badc9f646fc0d1d67c1de6e5354ce2d4aa37b84cc3ff7587a43 The package dewanto-tahutek40-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in vina-bakwan70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386d24dd56329990b548ff9622aff81472eb153cbf89f31e0708003cf19bbf9 The package vina-bakwan70-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fadhil-teh27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a67b18a0b8b50079e4ddd94e4ba8731554aecd9052c42b1999c0ab391c615d The package fadhil-teh27-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in vina-gudeg80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1839d82325470fb63b07a06fa6300c1ea699a25f3265c3dd499b7c5ff8f2fc8 The package vina-gudeg80-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cindy-sambalado28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ce7e6b3d6e1832f308e35ba04f5e82f991b14b9c204105def4efc1f4a331ec The package cindy-sambalado28-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52712 Malicious code in wibowo-brengkes58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f674e8d945cb3c0e2ce235f985c7e03c03f523b34fd4e6e09bb8556cf4cff2f3 The package wibowo-brengkes58-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in umi-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb37a2fa779d90cbd2852831de2ed6a206255f72b21b490b9e5eda5e3432bcb0 The package umi-sate45-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50913 Malicious code in bambang-papeda9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ace52aa73c57f03253038f8042bf4eb23112e3a219f24574b720f6ff129765 The package bambang-papeda9-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Shai-Hulud npm Worm

Shai-Hulud is a self-replicating worm targeting the npm ecosystem. Once it compromises a developer machine or CI/CD runner, it harvests secrets and uses them to republish itself across multiple npm packages within hours. This advisory holds IoCs and further information...

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2018-8048

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...