MAL-2025-121861 Malicious code in misleading_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042143cc9c0ddcaf73e0d7d7958848af9c4e6eff8f193ee5d9f2abd967a277c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119172 Malicious code in cindy-tomat2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157fa98293da39ef51d1b9e5308030ce2c16cbdb2b08e6e5b2826bf09f1b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-jus16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c3be707cf37e109f6c6579465635e7fa842de835a0836ff0d78c119b70257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120966 Malicious code in jaja-brengkes95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9051e01bb8e89b01b94548339509b922ed996cc23ef8d79cf6c33a95ff99bf02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123282 Malicious code in siska-lapis52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cac1979df786ce8751cf4905e4da94f9607a9a62f1ea5e33fa227136830642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-taiwan18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f9b721f1353c939e406e77fa9078cfda6d211abd17d84576b259490daad54aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121860 Malicious code in misleading_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfb9cf271918b651906aeaab0ca584a0385d501f83da1b02093066f52ef25bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119273 Malicious code in communist_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac3176b84066121db8a20a82e541e71093f00d8acb558c08a551019d2f30bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118656 Malicious code in agus-pecel29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deadf229070e132c11d8cfb55e81b32e636a9326771fa921c7b08ee6a139b814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121466 Malicious code in lina-keraktelor82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d78a41d5227b27ec75551fc91c67ee6b413e9cc8368b0de07cd28dc586998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120830 Malicious code in international_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fa36873ba94317f9de9f59cd5223464db8c361232a350d9b889b80c6a69b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120201 Malicious code in galih-sasag51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36e1dd4a69a5433ede5a05d1951096fdb269a8d7ae07cc35864e9871bcf1b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120628 Malicious code in homely_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55caba9a8a5174e2f66e18c464bb2ab99d4ab4e08b20c88a668547d00a913583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119960 Malicious code in fajar-nasi96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b243a61c33d5e044319079c2f8790d4dfbd3422246d04f4bbb354fc23244e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120361 Malicious code in gita-tiwul7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b8694ccede8c9bf6691116d319d466d95e0083fa6e4c6dbe72476c45e6c5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123425 Malicious code in surviving_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf280dd7bed81a76a11eb0d489c01fbd46479b12f1fee9f7299524d1aa0be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123831 Malicious code in umi-serabi65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840bc099e46be838c6a59a4b63814e52e53af22bca9b04fedfd0f556f8287dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93399

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

Malicious code in awake_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9720e74a1db153b11565dd7e2b93155b4861b2a9f1dce23869842d639112d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...