Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61943374ee28083fa6ec7a427f8625ca5e007b6c069eb21508d20dbe6f2b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138942 Malicious code in profitable-aqua-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00590405f461dda0098122e87e1c693979c95cfc3cc20f847d3d36bf0363f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139056 Malicious code in sure-sapphire-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f9cfb7c80950d2d8180a19016915d7d3a61f79c4b5e2f7508f69cb51fda23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior-azure-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9a3582216450441001794f273a4e94b91e345fee88bb4ac5184c97656b667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138932 Malicious code in persistent-green-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6344b006626a07523e1fd1ee1a20498631a2c9826f40bf950145bf5d7685e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional-violet-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51eff08cd719ab80220636bcdd687e5e99fec5bb37ad6bf7cf2172954a91741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138874 Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138954 Malicious code in purring-coral-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fd356cbfe0c2f97fbaa684dde368d7049a30f8c0cbbb9f17d877a81e8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138800 Malicious code in influential-gold-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad2b907e7638c4cc960232fe1ba9d5b4991ef9f2e74f63b98debd0b8ef7f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138824 Malicious code in keen-olive-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3342c8dc029f19ccaac6ea7425cfc1d8692c450ae79a90f2159d7949bd4d6f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD that stems from authentication abuse and could allow an unauthenticated remote attacker to send specially crafted packets to obtain administrator access...

PT-2025-46572

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The software contains an Authentication Abuse issue that allows unauthenticated remote attackers to send crafted packets to obtain administrator access tokens. These tokens can then be...

PT-2025-46573

Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The a+HRD software contains an authentication issue that allows unauthenticated remote attackers to create administrator access tokens. These tokens can then be used to gain access to t...

Malicious code in gilang-semur96-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b4ec37b552797d3bf7a7ef4b106d5b9c608f1bca6afdacd97e2c5029c9c87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e31a6c4697faa22918f483b39716f63fc6a6e4e2eafb1f52eee323793d0c750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...