MAL-2025-155961 Malicious code in ican-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e7411cf4a268df43848d18631f3ce1fe0b413e2c506a59507641ad39a44930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59089

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-nasi47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26316d8d883e0c5edd7cc50b4dfebb0e9232a66fb4b257c2877211ff81ba483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130019 Malicious code in sari-brongkos73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bae65c66f97f0c4a2ba607a861499077f0a13c807113031c49843ecdc10c699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93497

Uncontrolled search path for some IntelR Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalati...

CVE-2025-30182

Intel Distribution for Python software installers prior to 2025.2.0 have an uncontrolled search path issue that may enable local privilege escalation. Affected component: the installer, with exploitation described as requiring an authenticated user and high complexity, plus active user interactio...

CVE-2025-30182

Uncontrolled search path for some IntelR Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalati...

CVE-2025-30182

Uncontrolled search path for some IntelR Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalati...

MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c304fb95e848ec64d057cd6b420e078efa74bd545e3f5abdd77305b794cd167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89370177a218c952376d9c7b9ef34d2841a0c27e9764f96b732b94bfcd27127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96094 Malicious code in psychological_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f728fe10040d29a22292f15dbc6fc19e87eda43d1dc6ecafb8179cdc6cc0dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91261 Malicious code in tuti-kembang40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17da342a6d147a3afc67aaeccc1c8027a7e6df927b12adebbb1fc003731492dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82418 Malicious code in written_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ebc2935536962c1547b15efe4cc0215c116561cd367b61403b52b0ac75f44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77688 Malicious code in dono-lapis83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051154938ca161b09a3ddb86eb118f6e3a04f72bf1c782401d93cf9f770b1ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71827 Malicious code in ade-klipo26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43cc1cdeafddf8c2dc5d096394bd3d57d953f0fb868cdef5c28b4130b2170c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Intel Distribution for Python 代码问题漏洞

Intel Distribution for Python is a Python distribution optimized for Intel hardware from Intel Corporation USA. A code issue vulnerability exists in Intel Distribution for Python versions prior to 2025.2.0, which stems from an uncontrolled search path that could lead to elevation of privilege...

PT-2025-46412

Name of the Vulnerable Software and Affected Versions IntelR Distribution for Python versions prior to 2025.2.0 Description An uncontrolled search path issue exists in some IntelR Distribution for Python software installers. This may allow an unprivileged software adversary with an authenticated...