EUVD-2025-138088

Malicious code in avarage-olios-noilagagi npm...

Malicious code in modiov-khan-avcafivaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fa94e87d73c216ebfb4394a898a713981b9e7138d7c1a4b1064fb2d46fef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182420 Malicious code in imodiov-kufni-acumnacffgteafgrdcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e9192a1f7b0759bcb577daacd5a88259a6361350d2d2445cdde6f5fbccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-gaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d7c0b8f5ef35fb618fa473047b1032d67e131366c9de9b6f3fc42cdf9f478b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182959 Malicious code in itale-adcii-gnuygurygjhbkomtollujlnrti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44176e1a830693b92ec04164525a18f61e8ce1b1c3ba4945cb604f5409f16f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138044

Malicious code in flights-inlutag-iduliabisa npm...

EUVD-2025-137097

Malicious code in imodiov-kufni-uavcseqaba npm...

Malicious code in modasv-kuu-boafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec12073cd37109c3ac343bca3077f5fb45f137ac3e4e0754e4d28a38be6fd3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9594db946303725f21ad7ba6062c191318fe954eaecb59a6b93562946085df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aviggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953725771909d0c597ac624c788dde71aa4414663981d9238c6ec2de38eaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185256 Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138139

Malicious code in avangs-olium-nilvaint npm...

EUVD-2025-136041

Malicious code in itale-dci-rr npm...

Malicious code in one-kat-ibufadaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9712d7d51ace948ada3d80f10205b20611022512eb8e2ebcddad0cf7b5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2022-4983

The CVE-2022-4983 issue affects TEC-IT TBarCode 11.15, specifically the TBarCode11.ocx ActiveX/OCX control’s INI-based licensing handling. Reported as enabling remote creation of files on the host filesystem, the vulnerability can lead to code execution or persistence within the hosting process c...

CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

EUVD-2025-134879

Malicious code in aibola-milomipe-apaaumai npm...

EUVD-2025-133120

Malicious code in teate-thy-sonic-gedip npm...

MAL-2025-180558 Malicious code in teate-thy-sonic-jimhab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547883a364d0554c4a4ccd7833d18cad8669f2d873ebf2b2ca870ec20971ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...