MAL-2025-92513 Malicious code in yanti-kupat45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b53a42d2657d8e2eb7d1e8a6022ead4a7b6b1e51fc20e2684881624f7a64775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90437 Malicious code in scattered_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b65ff947395e4810155abc21fb22b546d8eea2efeeee09b0cd3060ddf1c3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-botok24-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb03a990f47c113882b487e8e3ffe6340b91571b546ba61d0208ae15c01c3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81057 Malicious code in rifqi-mendut96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4073d9607ccd2088fa6ebbbcc6d4699bb45c1a46f8ac201178df3b2bf83135d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81582 Malicious code in tania-mangut26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940a9f4be694a654e2e8fbd7dd751216499a106fac9b76826f7a82df055f4b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82483 Malicious code in xeric_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ce4208dd51513efae45897a9e9b8072044d2a0f03ed6ed4e0c56bb5fa98eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73938 Malicious code in kresna-tumis9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf1e45ca4384efa8d0d4dee130df85d63fddbce4dc8acea2291ddd6c8a3da57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in connietalbots (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf715c73ae85409bb8ce11e3d5c7f3707df30f8215e3d76f09afb5771e318706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64270 Malicious code in maya-kepok61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183e2b8df5a6852bea85bd761236ea502dc35970b9957b182a5093d9bccfefef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53725 Malicious code in irma-lapis55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dbe56911e418bb64830cf842db3931ca6f6ab03d393afe807510229e9f0693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54781 Malicious code in sari-asinan99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870e344341628fa582c142f4e38ad950e286519699374696ac5da6fd5eddfd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54616 Malicious code in rifqi-ketan12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa76c6ff6592e5752efb41186f3145e8f65313fb07381e4f27fad85471d08dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-menjes87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af6d18683b530fcf8e1d81b885b8c3e8a5d5a3f423c86042c11c3421ec519ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53278 Malicious code in lutfi-nasipecel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31200a05653ce5f0600120b83361ddd8744dc735cd8b7614ae7de0ce32380a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37923

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...

Debian: Security Advisory (DLA-4360-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-8e17ba12e5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...