MAL-2025-93489 Malicious code in central_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2e806fccd27ee2ebcd59270ffeb6d9b3f4ab5964a33e6f7b4bdf9d61124ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef50a6ff21fb926238e17df4dd6b8afa5256922cc3a0d53ad53ed77adc73355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55516

Malicious code in central-green-monkey npm...

EUVD-2025-55518

Malicious code in central-black-tapir npm...

Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-lavender-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82aa6256ec4e79c8981db54b42b923885226588edac38824f132c7c21a471fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67135 Malicious code in central-lavender-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f423e6359c5c08c44d546e0dd3c88362d4572128b43a53e8650cc545cc3152c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55515

Malicious code in central-lavender-armadillo npm...

Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55517

Malicious code in central-emerald-nightingale npm...

MAL-2025-67133 Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55513

Malicious code in central-violet-porcupine npm...

EUVD-2025-55514

Malicious code in central-lavender-kiwi npm...

EUVD-2025-50597

Malicious code in centralgrasshopperz3n npm...

EUVD-2025-50595

Malicious code in centralsparrowz3n npm...

EUVD-2025-50596

Malicious code in centrallungfishz3n npm...

CVE-2025-57712

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

EUVD-2025-38270

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-57712

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-57712

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...