Malicious code in fajar-bakwan25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f49dfca7abc5dd94c6867aa0575a88aa995c9bee75d781210e7d9c168269a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93086 Malicious code in abundant_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252ac5a5e25e3f470cd9d0632452f297256e0ad8d5b6f05488c1c2f8730e9201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rujaksoto41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c092e2ef5fbfcddaa262ce0d75418e8e0a09c8526a29ba9f8e26e66fcec5564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80111 Malicious code in nadia-gembus92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afe78774e81489c7d6413181fe8166b8858fc5e5ed5529f7dfff5632c152d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80583 Malicious code in patria-gulai88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a839a8962637803c97ea0d3d0bb1cf78cb50cabdd7b47a4513c20aea54fb290c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1915ec43353a078057d15bb5c6b3de4e1d92f4175255bc26643530f6fa997e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-jade-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df08c5a6310ebc1dc1fc88ff782a730a7113a0fd8b9118299af594c8773de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68866 Malicious code in individual-aquamarine-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0d6f611f831170a473f4c9af646d6a790ef683217ee2e24f85cfda770a41a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63825 Malicious code in kiki-sambel18-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fd8c73cec29b127d821acf7a49d6d862b6d1a0b4190b9370347d9028ebb3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46438

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.160 Description An out-of-bounds write issue exists in IntelR PROSet/Wireless WiFi Software for Windows. This flaw, located within Ring 2: Device Drivers, could allow for a...

PT-2025-46532

Name of the Vulnerable Software and Affected Versions Grafana Databricks Datasource Plugin versions 1.12.1 through 1.12.0 Description The Grafana Databricks Datasource Plugin has an issue where, with Oauth passthrough enabled, multiple users sharing a single Grafana instance and datasource may...

PT-2025-46422

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description An out-of-bounds read issue exists in some IntelR QAT Windows software. A system software adversary with an authenticated user and a high complexity attack may be able to cause a...

PT-2025-46408

Name of the Vulnerable Software and Affected Versions IntelR One Boot Flash Update IntelR OFU versions prior to 14.1.31 Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary with an authenticated user and a complex attack may...

MAL-2025-57969 Malicious code in ogi-kacang51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d543248b450558300ee5ef6b446ddd8715d6e53e961e8994b82af081f48cf171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-donat60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4302848a127424f40a74202176fdf311fe8727496cfab450cf69b58124009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tiwul78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b244749d7ae618b401e98e506607a0befceaddf598683f83e6760ca4ed4db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46156

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description Improper access control in JetBrains YouTrack allowed modification of MCP tool logic. Recommendations Update to version 2025.3.104432 or later...

PT-2025-46150

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2025.3.104992 Description A race condition existed that allowed bypassing the user limit through invitations. Recommendations Update JetBrains Hub to version 2025.3.104992 or later...

PT-2025-45555

Name of the Vulnerable Software and Affected Versions Better Find and Replace – AI-Powered Suggestions plugin for WordPress versions through 1.7.7 Description The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is susceptible to Limited Code Injection. This is a result of...