EUVD-2025-93399

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

Malicious code in complete_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0dd699d83cad7a8a0aa15e9368c13a6e76a4d47208086e8ed0c258628a39ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113032 Malicious code in cici-lodeh99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c322a653dc1d5f534d3e55d8d27b72054cdfb2ddf5214b2bacabbafd22811b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9720e74a1db153b11565dd7e2b93155b4861b2a9f1dce23869842d639112d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-esdoger44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64eb2441cb10c990f7e7fbf526b92b1115199b8387aef96fb98619a6d63dd941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-peyek68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa83e40af634f8bcae5028577f9f2513b17ac53bf7059c33d900d580dda8b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dae8e6c9d8235536f3cf7ba719c7626e33bb2f22db8b94f08590d850633b9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a6c0db3cbeb5bcef312589e6ebd427aab012c5fd417cfcdeb6c5a0550ff177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116189 Malicious code in ogi-naget66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d749bbb6b248ba8b56cd9671bdc23c14ec6a415856aa65d19e968a25b01546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117183 Malicious code in southern_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ed5274cf058f241ac5168eed9ce6f1038e182ef965efafae837bec751d6e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112904 Malicious code in bizarre_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09ec872c1be666baaa30be0bc0de55a2f688a4b5ab4b8839f6e9bf82332918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118181 Malicious code in yammering_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268fe356276a62e8151c46def13ab39ed2d65646de469b75d568f001c0b8baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bdfe5dfd5dde402aa88ed220521ab69e81c58f2bbe03450197f46a6d07e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-gepuk96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee06592d2276f728ac393089c1c3cd5aa5a135728c4405b5a1a3541f1fa58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98aec643e2d91f59650ed75d98f4931df7909c4f2aee74f4acd011021337ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-peyek57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37612bfbd8083d27a532d23d5f6bdc97c0e86cf5f2a86af9c84a41a7c105022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eeeb6268c9a09de91bef62482a2e1df850640de5c98061c8d9bf50302c00b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a00b6adf08c93f1c73e37d7ac432057169ac55be2d5f50e36541c109be88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114499 Malicious code in hadianto-tahutek40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727e7096d2093a7641f3cc32d30120bc90d4b069739e7c6cc80c9eb629e257cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...