Malicious code in xanadu-proxima-transport-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeb08505911268d5477af6771dde49e5f8b308294908a14422197c264ce684f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185755 Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46772

Name of the Vulnerable Software and Affected Versions ASUS DSL Series Routers affected versions not specified Description An authentication bypass issue exists in ASUS DSL series routers. This flaw allows remote, unauthenticated attackers to gain unauthorized access to affected systems...

Google Chrome Security Update (stable-channel-update-for-desktop_11-2025-11) - Linux

Google Chrome is prone to a heap corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Malicious code in avangs-olimois-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3578c5502cc9ee86a8c80a193c5431afa859d94e45415156731ce21ea0be7590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b4f1e78dab4e44a61e6dc933002fdb3313f392c583a7c0c6dd7c1479c9ffea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35cc65789c4527801b40de9592c67a51ce5df356017c1fba0076f3367ac49fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169900 Malicious code in uinsu-losit-bisaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51216b2089fe1cca454329753476cff1ed0a6369485353a441bfa38f8f079f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683c314055f749f47cc939cf2776e6c3e3cfaf69cdf8d9f3f43d8cb4365a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156312 Malicious code in ilop-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a35081871394befe6e9ca9aa5b2a1d4ec5e953d09d47d4c571ac9ffdb76482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora: Security Advisory (FEDORA-2025-671d7aa1ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-135297 Malicious code in lutfi-kembang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52cd9ea56ed4af6d6c06cca7fe607a40231f9511ae31503a6c365363dfcd677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134389 Malicious code in irma-brongkos31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e0f75b0d8e2daac39aeab0493b6247cd5e949b74d065f8b972304a5d68a88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kentang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ed60237081f036a1453bae437f4d62edce1463e2122caed412f5979e9366e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ruwet12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac5f94775edb1c794eaf2282bbc6bf6a3133f157a35ee376baa66babc6208f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137884 Malicious code in vulnerable_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7726097f92b95a394e21c334f12e7eaed89a17ad3cc8d1a66b153dd4ac2a493f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119064 Malicious code in cheerful_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e253fc341bbe4b95dbb296a74d1125d7a10c09b498d17e2451bf2dd893b593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b2a3912c53fde8c2c0475e45ace7144f17c40e05435e1c27fdcf8e5209125e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...