MAL-2025-53267 Malicious code in lisa-takokak96-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140a0d4cf68433c931be27b7764a1befc9fffa0ac1018db6cd170d12bdebe054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53595 Malicious code in ocha-kemplang83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bd24c1fb3b60c18b6ab66f92e2b21f5911d309dbf4ec047d32670124e27427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-sasag3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a520899054d895dacd74f966fa5f34285b04d3aed70ee9c951d33c7a28550ee6 The package bayu-sasag3-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eko-rangginang89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1fee5c01df6b3030e6658d1747f6fba0b1fc4956157532c9c30a16605da7e The package eko-rangginang89-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in wawan-martabak85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118edec8998cecd93eca3cccf8e8d51bee3b5a0f355a2395e6c4ff48d69a683d The package wawan-martabak85-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in budi-rojak53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3173239e1a385fdf39cae43135406292c8a8e734b3273c1701c4e0f8936bcfd The package budi-rojak53-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-sate14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb62cc5423ff5d9078179f29746ea010686b11fb23567ff440fd15f6c887a761 The package citra-sate14-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in andi-gorengan98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27171cdb5b2a0764d27c05657adffe177b18d44199c060d60693b067a4e4819 The package andi-gorengan98-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eka-sate23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98848f12921cbbc7c3f57cec73f1c629f622e498fd26a0a96cbd666d4c893c6e The package eka-sate23-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in vida-kue30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a653640108d823fb5b79d3edbe710cfae6ebb0cbdc3f18c600c69b0aee3ec9a8 The package vida-kue30-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50007 Malicious code in candra-moci3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c902722cc2ef5be6e444710c159e8c85f77c5d898dce253a4eb463bbe461ee The package candra-moci3-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51496 Malicious code in dewanto-peyek10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db61868488138a2d3c8e383926b6307b4bf2fcd1b3e843e955abeadf0dd9dc60 The package dewanto-peyek10-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50584 Malicious code in udin-peyek62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b57e4c2cd0fb1e220b68981e4b0172b84d3d3de2192f6ea95145a565a918a3 The package udin-peyek62-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51851 Malicious code in fauzi-gaplek13-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fda69de69d6fac0c3177fd8e6e42d5b805251bd4eb36416eb8f255407934422 The package fauzi-gaplek13-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50465 Malicious code in galih-rujaksoto43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4625f22eee97dedc13da58c41c6baca369fcdfa5311d190e88f9758b8fc8abb The package galih-rujaksoto43-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

archives 路径遍历漏洞

archives is a cross-platform, multi-format Go library from the French personal developer Matt Holt. A path traversal vulnerability exists in archives version 1.0.0, which stems from a lack of effective protection for specially crafted zip archives and could lead to remote code execution or file...

PT-2025-45412

Name of the Vulnerable Software and Affected Versions archives version 1.0.0 Description archives is a Go library used for extracting archives such as tar and zip files. Version 1.0.0 does not adequately prevent a malicious user from providing a specially crafted archive that could lead to Remote...

ELog 安全漏洞

ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. ELog suffers from a security vulnerability that stems from the ability of an authenticated user to modify or overwrite configuration files, potentially leading to a denial of service. If execution...

Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal

Overview Wi-Fi router WXR9300BE6P series provided by BUFFALO INC. contains the following vulnerability. Path traversal CWE-22 - CVE-2025-61941 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Arbitrary file may be altered by ...

CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...