Malicious code in poliaoz-aiksdfo-alfdadgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55ed4c74572404ff77a66297078dc8b923bd0bc6ca292a5888fde4eb0dc046e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179028 Malicious code in tersui-marina-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698fdc38ff316f24bd97d5563a8e1dc7e8a4398d89ad3488ed6bea18449dc2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177072 Malicious code in nuyar-adamr-adutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d080d32b322d91d063150398c6a47465a33fa342d61be41dabc994b45217ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f653a9572e85db338df85cca97be2a482f1839af469c957a889b53fc805968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149799 Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137641 Malicious code in utomo-klipo31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa9344f9ab897961d4a02d12cef05ad75df6d3c99b459deb1dbc4dae46315b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-asinan14-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6d19fa9cbc15932b9f39a5d4ea1ec9b414c0a5cf1ce7582638ec123129388a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_mouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e20b87536de8f3d08730498ca5b79d7bc1f3aa7ca7268abcb1a0e6ac83b814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89344 Malicious code in overall_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d9f371246016bcbaa5e2f8cccd375f5378a3ba4aa7880b1460396ac27354bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91492 Malicious code in umi-serimuka36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7475970736996e33922be15d0f0b71f03d557b26703097ac158f1d66e788b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91129 Malicious code in tomi-empal54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31368fd740d4c23b570bf96a829a0af8717ac20d3cb14d3976c45b7085b70eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81539 Malicious code in surya-nasiuduk8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e586fd192cd6113b8b7a77138962261c0edfd89a667f2e22722c725d0161a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64716 Malicious code in oktafian-mendoan77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d9da4a0f0cf944a004d565bfa9de5cf25ab1b17fbdb6fd55fa12107f99cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a659793d3e34a86e15ad92dd9cd3a79c9eff05f810f5ca6535b8f4036909fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59649 Malicious code in yanti-nasisayur79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb91f11216c621593fa5508b8a811c716f53cbf1e5443bac8f75c0b9a38bd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jengkol5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de5abe2172793adb0e21ff77ac2551718d1dfeab3af3452f65eaa3664ab53b The package bella-jengkol5-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2006-3780

Malware in sbrugna...

EUVD-2005-2174

Malware in sbrugna...

CVE-2025-1945 picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in the ZIP file headers, an attacker can embed malicious pickle files that remain undetected by PickleScan while still being...

CVE-1999-0703

OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...