CVE-2025-12870 aEnrich｜eHRD - Authentication Abuse

The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...

Malicious code in hercules-meteor-sync-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1c40a1e572a21b09edc363496e9529bef3811850b83d40f0e9b07ca9d5be10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-rehype-browserify-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-less-prettier-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a225f8d7c5c6113c9260a3932aa4eaddc2cbb9866a451febac0b39b75bb705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-cors-concurrently-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8121f3bcabf23a54ce9586482341eebe56d5f0699a7d633ecd0839dbf98e468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114385

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-apollo-europa-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4eb6051a4b9dbc341e909f1b7140e2b5d8827337159c41ee2252851b56fe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-eris-fornax-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab0f6f4bd6c72c6356b5c351cee6d85d6bc45ac5ec86308aab75f45f8865400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-auth-nova-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e345ac51f637602bb21180a5a15e0c808801e9c9c5860e07eccb477eeb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-link-eleventy-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ebc1e11460b446c5c5307ff7dc44ff2b2888e9c27a939ba49a5527c724633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-callisto-orbit-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517427dceb0eb545cc4d3437a5e1f5e1e0a84c52309c6a0f22c3484d4873011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...