MAL-2025-166513 Malicious code in syahlan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e98d256e625460a28e4655f8f7a8d61ac2bb75d2c4898e220f051a8a1082652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151196 Malicious code in aben-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8d9b8e75bafc458c31bf88ad967352fa6370c82cc3023ff9bfce40a157059b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166961 Malicious code in teagood-lokika91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd0a68dd789ec7e788ca3b93d226f06ef93446d206f84eda90f0ce4fed91a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131907

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...

CVE-2025-11566

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...

CVE-2025-11566

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...

CVE-2025-11566

CVE-2025-11566 affects Schneider Electric PowerChute Serial Shutdown. The vulnerability stems from CWE-307: Improper Restriction of Excessive Authentication Attempts on the local network, enabling an attacker to gain access by performing arbitrary authentication attempts against the POST /REST/sh...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148686 Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148578 Malicious code in test-redis-pavo-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c18723d9549a926d44369006cd918f865ef10e25091548cc67f2fd8d052eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239baa4ee5be2314b00c6366075b5d161fc8a0c12288c3839e1382e0c010d0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-kacang28-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cc12d52ee22f93043d34e92899e466aef1d38de55ea1aed73b954fc0e8bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-tahutek10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1790baf9c7cb541f3aeb4d7c9607fbb4f9ad7d3c3166cf6167c8b1ce544e20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118626 Malicious code in agricultural_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fdfea24b3846d9779bd4ce934e2c2e91d52a4db102557a411931609270be62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-klanting81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372ccd2c2657dbcf945249b79a8f97c1e085bcf45183065f0a4e70dd9c6d29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84351

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This iss...

Malicious code in polite_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c65a75176fa282dfdfaa6314a2d48eb80569947c0c175bb8f087454c3de431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-soto77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c4e697a57e69eef643e17aca3d1753686e1a576338c06799c94e399246030d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_canidae-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb6fe098cc3649dc79ef512fb922f7ac169039c92717277b9cad3cdef580228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103260 Malicious code in glad_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0537cbb93ea528ac2f279a9a0757ca972eaef874ada423de5c7eefb2d9aff7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...