MAL-2025-176767 Malicious code in nuilva-daerde-oagafigfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f41bfad981250f06bf52e540f0c214ea82a0b3eaef2f56a8c0329a6abc77b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_bobcat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab14fe86f4a7a29b08eaa680d4bd0d75691cb95ee1db6f042384135f46496d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100743 Malicious code in comparative_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a95dee99b0c007b840e42bb00258da3b10c335d9e79a84e915aeb611d7d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2963c6ff45959cc6f335ab2ad51dc25c8c99700a2ac2570d8c20cc5cdfe7b3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82657 Malicious code in yuni-tempe50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66b8e5fa952d5ff361165cc7bd938290a42b2d2a7283fbb12abe17d2125baf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketan16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a93b9e3c898bd6138d72cbbcb7d7511486504843f67ad93b6878918c329d099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the SMC-processor GLOBAL_CMD_ID_NEED_LOAD_APP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system allows a perpetrator to trigger a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the SMC-processor GLOBALCMDIDNEEDLOADAPP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system is related to the lack of validation for input data. Exploiting this vulnerability can allow an attacker to cause service failures, modify program...