Malicious code in yanti-gado-gado28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea059787f87092b339aef65fdab4d8893be1f082331e3ca9c21a8ec6605a6ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55500 Malicious code in candra-mieayam5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac7fabf8078ad99d2ce7bba564e41925806dcd7f00ae0ec1f5ce6548d2be93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57120 Malicious code in keen_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121f36b3715f491d6d0bacaccef6b51dae16948104b8cc2b59bbafc9bd2f0978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58503 Malicious code in rina-semur65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c4dd9dd75d0e64f5144cc42744d673b4efc9f37cc17380598dd36e0a383ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56527 Malicious code in gita-pisang64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1f4632c27528e3ab170a74bb8aed0e532cb28c54cb415dd5f3f15f704a7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tempe95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde2908f8bda19ae3b6060a362f80ce238b18c60e1511f1d0e0840d546670ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58930 Malicious code in tiara-lapis76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b24c5256b3e5e749a416c0404212ce6585d20b5f7cbce7768adf6e684bb5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58348 Malicious code in raw_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b39dcb455f27c7fdcca55c45c2253a88bf99dff6cffd18f7f5f10191864d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58617 Malicious code in sari-tempe23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3621afdb4f1bbb6890d00666e332c92f6e16f1968029fadd3ce25702e4bc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56815 Malicious code in indah-gulai7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd81e9e289d623a58a5e3e7854e3d7a596dbb0e2d595ac41ef960eff47cec619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55594 Malicious code in cindy-pisang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f13086bc54678fc0d29ea20b3aabd06984312268fefde79ba753e210d4a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57059 Malicious code in joko-saguer27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660d2604ef4fc3e6061a85ed2e20ea13681454c496a1032e13da26806e158fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Watch out for Walmart gift card scams

You’ve probably seen it before—a bright, urgent message claiming you’ve qualified for a $750 or $1000 Walmart gift card. All you have to do is answer a few questions. It looks harmless enough. But once you click, you find yourself in a maze of surveys, redirects, and "partner offers"—without ever...

CVE-2025-41731

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

EUVD-2025-44036

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

Malicious code in ogi-kacang99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48ea9a387cf2e26fdf0c2c6e38d31b9021c2c0c789b16260e80724af09c8de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21906ac9a18696acca0bdff9dc77827ac1677e0cb85018156860c587d4295b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-telur36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be6f98d4a3c2442fe204962c05eaef7aa986fba3de6ee97f08baa7c33d7a321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f5c1c1aabaf6ca9a7a058aa928ebf58de932a25f194e148878f929ae90f593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...