EUVD-2025-179774

Malicious code in changelog-borealis-resolvers-resonance npm...

Malicious code in resolvers-solis-native-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d6c0271bfa31246dc0e28318a0cfb1ce680b0268ea0bf941130328312bcf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-resolvers-quark-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bfb629499da5c9e01ccc9365672ad6e8c74fb46d6ef77e41e64360a8d779ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176670

Malicious code in resolvers-typeorm-dependencies-development npm...

Malicious code in resolvers-heliophysics-apollo-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60103abfcaa8fc26071abc38c8d81f1d5bd8f1c7ce82c117b98ee3f28734ac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178278

Malicious code in jekyll-resolvers-quark-epimetheus npm...

EUVD-2025-178612

Malicious code in halley-resolvers-quantum-neptunology npm...

Malicious code in pegasus-resolvers-leda-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188605 Malicious code in pegasus-resolvers-leda-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189200 Malicious code in resolvers-kinetic-eventhoriz-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa06e998c3d788fa72d46ef212a5ae000339d3d9b287dfddbbd99d288cc440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

EUVD-2025-114582

Malicious code in delphinus-oberon-resolvers-kinetic npm...

Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-112242

Malicious code in jasmine-ursa-resolvers-auth npm...

EUVD-2025-113939

Malicious code in eris-eslint-plugin-slidev-resolvers npm...

EUVD-2025-115571

Malicious code in centauri-resolvers-helmet-apollo npm...

Malicious code in resolvers-dactyl-process-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c192be33a155577a5f1ff5067fdde8184432d1e576e678aa429d38a8c06b33a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...