Malicious code in creepy-maroon-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a1c42383c651b45d3e707748bbab66dd1061fb0bb345c669c707b0f6454177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56058

Malicious code in abstract-sapphire-falcon npm...

EUVD-2025-51663

Malicious code in surprised-aquamarine-falcon npm...

EUVD-2025-51426

Malicious code in unacceptable-amaranth-falcon npm...

EUVD-2025-52732

Malicious code in poised-scarlet-falcon npm...

Malicious code in xenial-magenta-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bbcf1f7d2a2d97796895bfb1191d34cea382c199051a16d624f0b92aff9f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54204

Malicious code in frozen-teal-falcon npm...

EUVD-2025-51197

Malicious code in victorious-turquoise-falcon npm...

MAL-2025-71088 Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67924 Malicious code in eastern-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9149d6e69ecde9b2b2bba6d96e3344b404209f74dfd4a68e03aeaa250ad58d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67534 Malicious code in creepy-maroon-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a1c42383c651b45d3e707748bbab66dd1061fb0bb345c669c707b0f6454177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49929

Malicious code in leadingfalconz3n npm...

EUVD-2025-49174

Malicious code in tragicfalconz3n npm...

EUVD-2025-48216

Malicious code in desirablefalconz3n npm...

CVE-2025-42701

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility...

CrowdStrike Falcon Sensor 7.16.x < 7.16.18637 / 7.24.19608 / 7.25.19706 / 7.26.19809 / 7.26.19811 / 7.27.19907 / 7.28.20006 Multiple Vulnerabilities

The version of CrowdStrike Falcon Sensor installed on the remote host is prior to 7.16.18637, 7.24.19608, 7.25.19707, 7.26.19813, 7.27.19909, or 7.28.20008. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - A race condition exists in the Falcon sensor...

CVE-2025-42701

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility...

CVE-2025-42706

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility LTV...