MAL-2025-71680 Malicious code in xenophobic-silver-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c3145cd9591902dee3b98fa1287ade3818c70d9c9eae9576c4a500ba9d569c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67198 Malicious code in circular-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd48e4515f4491e495e1f80799832ef20aeb3b01c3e2bbbd614bbecf6c6e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369fcd111380a097e3794f0c069028f06bb4544e2ea84f9b377dafa1d5731781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-soto22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ebf420ee8091f241b7fe0894d26afcdd46234165e1c665ebf43150e4971e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d05a56ceb98e1ad10f448c57d022873d1ca3eecd4a059f6843fc8fcb77229ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62806 Malicious code in erwin-lontong16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8049ced151d5b83a724ea12ec32ac540c0f0c74b29a863fb29d33104abb4fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62746 Malicious code in enormous_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea338711b11e4543a276144cb983538c0a123d8f4c43bfa2c6abb5ff07489931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ad5c0e392a44174042217187b808342320694f72b1ab40618862fbaf5ba21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c6c509a03b25c03d42f20813ef37b5f51d35e834d6f4f9e53f17179b83d82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-mieayam31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ce9f3115705ec5859db5984d08b21ded8c16243821f91731917a15b05d80ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-taiwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c49a7275f02f11b2182fca6a961f4ae9a8bcf0fbfa2aa404cc0caca8bccc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-miebogor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ebfc66a3f9b02fbc2efa635a590d18aa36ac9a3c97e6628628ff8eb4f7761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62097 Malicious code in bella-tempe53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901b9ddc5e03757920c5803834819e5bf74a87e5a8431db17f48eb0a0e578465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba9d47ff363d5773bfc6a440424d3394e6c3d188f86a9c16ef197ac5e753f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e08182fa7b2f024be0db1d8dd6a568f3c488c7b19a1a0d76a82bd14b9680aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dac326df5a9ae4f6d7ecc323ce53dd1f6a5a9d1b2c83a894f2a250816d98322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

📄 LINQPad File Overwrite

This Metasploit module exploits a bug in LINQPad up to version 5.48.00. The bug is only exploitable in the paid version of software. The core of the bug is a cache file containing deserialized data, which an attacker can overwrite with a malicious payload. The data gets deserialized every time th...

Siemens LOGO! 8 BM Devices

SUMMARY LOGO! 8 BM incl. SIPLUS variants contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends specific countermeasures for...

Malicious code in aggregate_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1884cd822485ed5047c3fe55d3b38e7df9261484c623ee3d95e9e17830d28b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60810 Malicious code in managing_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132bb945a80d66d8d5cbf78cb5570ed9a24aa171df00cf977024754c13bd5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...