11758 matches found
MAL-2025-158705 Malicious code in lookingan-namakita89 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb500741c8a22743a7072be6bb6f139fac08b0924af5899c144312d01814294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lookingan-nalako87 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34301443f937e5258814341a066b41cff635ac64defbf622aa253d0acd51a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-147219
Malicious code in uarg-masituhai-suf npm...
EUVD-2025-149050
Malicious code in teagood-sukuna100 npm...
EUVD-2025-143812
Malicious code in nabuf-otogamafian-dohjau npm...
EUVD-2025-149950
Malicious code in teagood-cuekin92 npm...
MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem
Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.2.2 Vulnerability Details CVEID:CVE-2024-55459 DESCRIPTION: An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile...
Malicious code in chromedriver-aldebaran-helmet-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f900c6a3ea209cd194b0027126b48e7dc7db16c34e75b57b0de4572dcec45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123478
Malicious code in postgres-perseus-karma-tool npm...
MAL-2025-142766 Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144369 Malicious code in library-apollo-sagitta-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-config-carpo-wezen-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474671efbafae254395087536634a0fa2478a1859827adcc686b4a54f49d2c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111903
Malicious code in koa-xml-chariklo-perseus npm...
EUVD-2025-114901
Malicious code in cosmos-jsonp-sequelize-cosmos npm...
MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116497
Malicious code in astro-geckodriver-janus-helios npm...