MAL-2025-186874 Malicious code in event-biogeochemistry-blitz-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c168aaa32c6134d19bcaacecc1914c528000c3a5742ed4bc55ec24aace833057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-bellatrix-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf6a73bedd37afa153addd17291ff79786e5d5009b4cb9990c9544a21544ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

WordPress plugin Auto Prune Posts 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2025-46798

Cross-Site Request Forgery CSRF vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Request Forgery.This issue affects Auto Prune Posts: from n/a through = 3.0.0...

Malicious code in avangi-ogolia-iualim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fea4fd78dd3b54e429d00ad10b0d377e2c6ee3b6c934b6097cc1b34cab2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agiyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84cfd6846385891cbd3e889dd7bcf0d6afc6ca6a0246474d78821909c39a233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba52c4c9ab56d449a088dd2fa00e9ba2729989d75b6de74d64fb2e47f6311e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65949ae5000f85c964473d14e8565d5ed85a055fdb82d7e0283afe50e02b047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017bd37bed218baf8180f7a8d67a732992a8cdf361cb6042c6545f2bf75c2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4696f5497362a28ffc24161db611b2c81f11e180efb4772e3eac3d25aeecea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4ad60e61988960518fcda8bcdbeeb82eb18575c188daff702513fbaddc1232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfbdyyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7365c375f9f0f739f25d47e5a5d4e4e6e971a5016d82ddae22958cc379c4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144290afa69a829cb4ab0bfcb3ff475288a181b2f8baa5ef701f052f0a3d303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialobaoina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b1fab2824f2b7fbe2f966ee95ed701b1efa1ef6445233fece5dbd671c2fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodj-guofagiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f800451491780eb3162715cc887022e8288887ff3c9ca5e64ebc87a0682d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civufavicasaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0c105bc829bcf0955ffd0cfa96c528f2c29b2a43880964f9bfc63a8832ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...