Malicious code in governing-amber-camel (npm)

Source: amazon-inspector 050f23d03776f0191dcebf0da82cb7e63a8324e8b4ef3216d720166738409510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-98453

Malicious code in governingcanidaez3n npm...

EUVD-2025-104928

Malicious code in governingbisonz3n npm...

EUVD-2025-104927

Malicious code in governingpenguinz3n npm...

EUVD-2025-76739

Malicious code in governingsilverfish-strongdev npm...

EUVD-2025-81778

Malicious code in governingbasiliskreplicateautomation npm...

EUVD-2025-71553

Malicious code in governingmartenz3n npm...

EUVD-2025-63828

Malicious code in governingchickenz3n npm...

EUVD-2025-63827

Malicious code in governingmarsupialz3n npm...

EUVD-2025-63826

Malicious code in governingsnipez3n npm...

EUVD-2025-63824

Malicious code in governingswallowz3n npm...

EUVD-2025-63823

Malicious code in governingswiftz3n npm...

Malicious code in governing_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46d222be9feeea129000f1f080244c1969ea9c8499333dde7776f55e9b9fcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63822

Malicious code in governingvulturez3n npm...

MAL-2025-94730 Malicious code in governing_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b35c5c398425547599428013fe6e00357b8f550730086f64fe3a25530712fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54082

Malicious code in governing-amber-camel npm...

MAL-2025-60565 Malicious code in governing_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588289189718432160b8f306b7695ca6b683fddee132ec923dfbd3537f14c674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50104

Malicious code in governingmarmosetz3n npm...

BIT-VAULT-2023-3775 Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service

A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8...

CVE-2023-3775

A flaw was found in the Vault Enterprise. A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in a denial of service...