MAL-2025-190204 Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48cd42be9a2a6be3b8e905ae225912535c292dc4b693ff78a5278eacad6bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189126 Malicious code in registry-firebase-bunyan-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d9b7fc7f6514023a049e5263cfac52ab080b751f5f9d2fad7965815713cab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189935 Malicious code in titan-bootstrap-lynx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188829 Malicious code in private-sadr-proxima-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89a93d2578c57cd446d95f50d70864c1820065c9b1d1096f45db5d6497ba4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187411 Malicious code in hyperion-hermes-version-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf735cb22bc6f6c69e8c0af04d9a49053ea95e2438caf22b90dd1226fbc2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187294 Malicious code in hawkingradiation-jupiter-toml-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f597817c5057b6028054d85338a68c535363cae5c2a33fa92fb3c5295d345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186526 Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0bdf76910544de6f7f52a3893e80a33923959859d77b7bb710fdc4a41378e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189922 Malicious code in thread-simulate-meta-small-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdfa3021ecd0ad01a51221e712454a6877d5e7754aa0208e2a6f1c908ffa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186701 Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa590854af1589f753368b9047a4503bc64b6412f3131f3d2bd13cf72a2f6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186908 Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6b83f3bf5aa13c5c240a68822042cd334b7ab9ca7607f5c0562f4b8966fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190028 Malicious code in uglify-view-stub-simulate-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddf3dc0821ebba5a3a738773863d28177213852142d69afceff7c2feef8f7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Generex UPS Adapter CS141 Unrestricted Upload of File with Dangerous Type (CVE-2022-47191)

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with modified permissions, allowing him to escalate privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6523410eca908c4b6e19bf944cf31c56dfc3b9674ef45cd5329da9a30549bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184444 Malicious code in modiov-kin-afbaufcaducxc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbce9d421d08578a5241f7fc1ebc5dbcc00d6328784f91c724cbbda4c6a7f662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaubfolfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002f893549d8e85f2f444ee9443992fc094ff4543de958e72183b419a170cfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugilkfoabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d8e271f439812031adbc9e5e0eda6e52907d3fdbe7e9bc29f41989df28bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahuvfaduuvufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b394dccda1dbd473bd1133f7a70f5210805ceaa601e48af062882b5ee823bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd1fce720714d26e4ea2cabce4e597beefb2e6944d86786afe73e3b3428b249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2526bf2e345959959cf4d568b035ba51bb19d5dc9fa02adb1cf95f7d8fe865e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...