MAL-2025-185595 Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2119ba76eecde671765855d9947d057698ac00abf631f90c033888f31387b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187218 Malicious code in gravity-taurus-superflare-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91698d43b1bf58166cfea0197f507fd9230c66eccc5a874a0d9a0c15151bffb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189945 Malicious code in toml-csrf-quark-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3982dbf209ee7d6c85aa17c309ca25a440c04ba6066aa91726691826108aebb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190484 Malicious code in zooarchaeology-configstore-google-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685650e6cfa174e861e100212f50881c079171023d9a1a82afaabbba16bc6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

WordPress plugin Auto Prune Posts 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2025-46798

Cross-Site Request Forgery CSRF vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Request Forgery.This issue affects Auto Prune Posts: from n/a through = 3.0.0...

Malicious code in mitali-dan-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418f93d91ee5bd14ee4e9a922937c05928bf21ffe4d2a9530bf34d76d1178e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-badadivudcuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf5c09bcf152d7ad888ad15e62ef4fa8a14df6c573e1c620c5e2d2eba324ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9e77310f705c623759470d21a4b36f15d8c948980fe42ee9800f0080024df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-timeseyaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a6308c15f251413654e01436e64a72a9ddeec67a68e276fe0cca2ac5c8aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adisdfbasdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc0bcfd3185990e62f37a9ac76307b10fd02117480d1308e1c1ac06bea9447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uvuffacfaafv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90c6ea362cd68d669b4a89f0f4ff7527b812dbda4ce1f5357adf9d2216465d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4b68274db53f56380fde73727526099d526f767f02cff775409e6f3a78964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaasdsdgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce6752072103ca1c77b5c3b0c4bffa46802c2c90910eca2fc2c742f228e58ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daiugadajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fab6ad8ecbf754203c6e6e5c307d3530a90d572221c6c5354e0b8b2c0203e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olodagivils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41170279a0132a6dc590c3e9959658e45d9bbf432027ecac9babc3c8ecd121f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb34fb48320ba52b872cebf586c29fafa87d37b4a9f0c3769996d335cac3def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...