MAL-2025-69176 Malicious code in liquid-gray-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-taiwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c49a7275f02f11b2182fca6a961f4ae9a8bcf0fbfa2aa404cc0caca8bccc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369fcd111380a097e3794f0c069028f06bb4544e2ea84f9b377dafa1d5731781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e08182fa7b2f024be0db1d8dd6a568f3c488c7b19a1a0d76a82bd14b9680aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dac326df5a9ae4f6d7ecc323ce53dd1f6a5a9d1b2c83a894f2a250816d98322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-miebogor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ebfc66a3f9b02fbc2efa635a590d18aa36ac9a3c97e6628628ff8eb4f7761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c6c509a03b25c03d42f20813ef37b5f51d35e834d6f4f9e53f17179b83d82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba9d47ff363d5773bfc6a440424d3394e6c3d188f86a9c16ef197ac5e753f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62097 Malicious code in bella-tempe53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901b9ddc5e03757920c5803834819e5bf74a87e5a8431db17f48eb0a0e578465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62746 Malicious code in enormous_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea338711b11e4543a276144cb983538c0a123d8f4c43bfa2c6abb5ff07489931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ad5c0e392a44174042217187b808342320694f72b1ab40618862fbaf5ba21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d05a56ceb98e1ad10f448c57d022873d1ca3eecd4a059f6843fc8fcb77229ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62806 Malicious code in erwin-lontong16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8049ced151d5b83a724ea12ec32ac540c0f0c74b29a863fb29d33104abb4fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-soto22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ebf420ee8091f241b7fe0894d26afcdd46234165e1c665ebf43150e4971e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-mieayam31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ce9f3115705ec5859db5984d08b21ded8c16243821f91731917a15b05d80ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

📄 LINQPad File Overwrite

This Metasploit module exploits a bug in LINQPad up to version 5.48.00. The bug is only exploitable in the paid version of software. The core of the bug is a cache file containing deserialized data, which an attacker can overwrite with a malicious payload. The data gets deserialized every time th...

Siemens LOGO! 8 BM Devices

SUMMARY LOGO! 8 BM incl. SIPLUS variants contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens is preparing fix versions and recommends specific countermeasures for...

Malicious code in usual_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d4ff817d78a04175775fc90295c101f7765f56f664dcc1e484adc2532f87ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eb13fcb75862b1971fcec1a17f7dc64d1e9e87565844ee70b8fad9ba51da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60988 Malicious code in organisational_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf255ced1c3f37c58b15e2ea3fe88194c6066f86380053923c1c68ccb384fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...