MAL-2025-157131 Malicious code in jurss-a1rea-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd07db606223407df84b520328abf15563c909bf949d831d573b526c91a32e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161580 Malicious code in nabuf-otogn-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f170985fe81dea3d1aba1cea0d6f7856f9bdb8734a73976e862b087e7baa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165964 Malicious code in siregar-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aedb6a290b5c6c95a31d32fe767a8d150476540eeaf16c7f16808f2ed343ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154197 Malicious code in dajouka-taa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b7e8fda7f209fcec371275addeef1f19cc62469a4c0b775ef0eb1ff19470fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159621 Malicious code in manda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e2ee39c1e23b437b629d821ea39ebea73109fd55069b2009ca236a5924aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162965 Malicious code in nokire-nakala14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0d69a8576b1df8918821194302b98553a85fd3840fbf9b7a3bc33ca508cc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168788 Malicious code in tealoveness59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76bf3ab8aec3636da18ad0d912844665501ad16cf9c4307ddb951ff3e762863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159882 Malicious code in mansila-toaviabpla-madolioibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a491ddfc0e6eed0c18bb05873104482333b4ab1ac87b11d8da0ab6c747a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158963 Malicious code in madan-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa212c11898534d11156942bbb6026cace9569e2be533c4a28725386c906a68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162096 Malicious code in nokiraifiagne-asaifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38032e6669ab327a3e0b34c2d15e419f2fa45ce97602f521231ab8b93510b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154539 Malicious code in dian-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3bf3b61f90cdfefdd009b1fda651571f07c7ab3d11924183d996322962e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167676 Malicious code in teagood-namakai23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489b0991049558a38fe48cde21218a8fb29098d2ac05e48c81a94d60f45f03b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11565

CVE-2025-11565 affects Schneider Electric PowerChute Serial Shutdown. A path traversal (CWE-22) vulnerability could allow a Web Admin on the local network to tamper with the POST /REST/UpdateJRE payload, potentially causing elevated system access. The issue is tied to improper limitation of a pat...

MAL-2025-140126 Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-testcafe-leda-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e7dc9ba0f5d47e98f774ea7995d2500ce1213a9d66d48a42b8ca8ae7391b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-slidev-json-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab7ee1097a7df9774ba57469dd259df17b9e9111d9a59f5f924b99d6102dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-enif-bulma-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce81995ac876d8def7a18811cc3624d7439b388dd0edecf100b7ae4c807e64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...