MAL-2025-119230 Malicious code in classic_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca857d6e042050aa2966b9a92dc7dd82645ea818fee8ea4987d8cedfc217140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-30185

Summary : CVE-2025-30185 is an Intel UEFI reference-platform issue where active debugging code in Ring 0 could allow denial of service and privilege escalation. A system software adversary with privileged access and low attack complexity, via local access and without user interaction, could alter...

CVE-2025-30185

Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data alteration. This result may potentially occur via local...

Malicious code in territorial_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bea9ca11c5d1db830031d1127c9f322ef96b9c3c30bd4d9bb567a0fcb968686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-telurtahu61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4a4dbe3d62126112925c808c1d031c5ae8d0955f87b31610f512c1e23ba166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103509 Malicious code in hadianto-saguer7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892d39cf8021e4293d5c1c395c83800bab592c6df72b7ca0984c5d4803a078dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103541 Malicious code in hanafi-martabak33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0a8f376b2b49641ec06dbc4805ae4990f236fcb3ee24d660b06b84951e622a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1f817e2540f37f7bd323c07139e0a38c79cb0b0142d03bcc6801ae4ed7e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-rojak80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbbe92ce5dad2dd990db57074cbcfbc460f71da34cbb87b2d7eab98af2550bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-nasicampur67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed365ef461aeb579962724a8c2c6946074f379ce2343603315fd18ec41b9376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052168301acc989b8c2c2253da18a2daecca9a74fd2df4abb1a2b4f702df6291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77663 Malicious code in dominant_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3977b9342438c4a5e5fd54077c66f865b974521743e004b1b6a6f4e35f1f9a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-oncom24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa87edf13762948f7aa441df8947abd82c5138c9b85e02b2c5f9e6733f99840c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bubursumsum49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300b5fcc681f1a5125e13ca6dae2722e43c06fd8c46acf069ba4723f6c672d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mendut71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbfe0d0c71cccfa8ad298d57c32af3494636993c0fb834a3214d07dc81917e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5687686768f47c99ee1496434cd38b3133548465ab7967e8c789f840191320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-soto77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7251cc45c8333f8b840f6fe869f8f232960896c4d4bc17b2ea5d67ed18d3f102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53626 Malicious code in ocha-rangi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c483a7c496769d55f7296bfeaddecd4c52d1f2a6cc6cfe7386507c37194993a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-semur74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9e4a792a45a319c7fcbed0f10dc7d24c0beed12872ee63d7ab2957bf7d672f The package umi-semur74-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2016-15050

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries...