Malicious code in improved_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3235b01e5ca353316b13cb6aa439e56ea580059a15d7cd2d726ae11048bca637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_donkey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e152d683f7e8014bdf061f3496c39b8cf94a3f78fc4b7ca2673492d3953b3d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81597

Malicious code in improveddonkey0xrequest npm...

EUVD-2025-81596

Malicious code in improvedmink0xrequest npm...

EUVD-2025-81598

Malicious code in improvedbass0xrequest npm...

EUVD-2025-63589

Malicious code in improvedleechrequirement npm...

EUVD-2025-63587

Malicious code in improvedtickrequirement npm...

MAL-2025-78912 Malicious code in improved_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f956aa87cbbd42371ee51686f7d664ce5ed64cfc5114399a5257e4f0a62de0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53832

Malicious code in improved-emerald-worm npm...

EUVD-2025-53829

Malicious code in improved-red-cockroach npm...

EUVD-2025-53828

Malicious code in improved-yellow-booby npm...

EUVD-2025-53830

Malicious code in improved-olive-kangaroo npm...

Malicious code in improved-yellow-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53831

Malicious code in improved-olive-catshark npm...

Malicious code in improved-emerald-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f24ed515830fe22175446bd3c7e7a424cee8f1c1c89efbd750428ee238601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa59bc434270f87e40f326f7f464811dd33489f6823e8851273dac00bf7d9af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50014

Malicious code in improvedcockroachz3n npm...

MAL-2025-60656 Malicious code in improved_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e09772a214e73fa5ededabfe54a3df250f09af21d2b9afc7744a96785bcc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-43348

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may bypass Gatekeeper checks...

CVE-2025-43384

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app...