MAL-2025-188177 Malicious code in native-docusaurus-xerxes-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76fb1a9a37978f3d3ec184f31412f0c5850cada7278ca09f41b5f50858bc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 and Ruggedcom ROX Devices Out-of-bounds Write (CVE-2022-37434)

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-ufisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06c2c3df1295b25c44608ab420f61d42d351f781f4f5e5e3d51a3f56b2e26a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a1ecb444dd60c61287d188271161f85a805e7149db66f4c1776fdd066a348f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bcc6949785852eaa9cb9ece8206116a337b83963cad8b8c2c0e1a7dce49b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-noy-gistsogapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7710e05ac436c22f6c6dee39f3d306a00aa6940341d17b68fa49174d49750b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca23e3d874a7c1c2d70e509bddef56c77f9474b34f73754c636a332f6fd5bb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oifads-gsisofai01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b427b11f1a5042a0f7f3706216c64c30212178ac1a06c84018a458fa65bd272b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avcafiaacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c74fb2f6d559b70ea456567f549baa164260f563def2a0d9cd81cfa443805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihon-afbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2586fe55979c4a0e3c583a3323bef75b733b88c2709bf02b845b0fd6c73e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-yafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62f2398b0e91d39071d20a1700542e17681b655a78ec4ffb8e77b249f6ea93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiko-avuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1307a7d3963578d8a1168c6c07013c2ee6f6ee8787db247efaf521f5dce9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foi-gisagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d101a618a7ba068b27581dafecb570667e436fba7e4643a4b4cfd467407f0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647f7b9158e9f36749c3aea9b1b1d1445b5ebb906bd6e8b158db6910e7b6d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabulikabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6f2f5ec58d3f1972b2e29651365a51c1c55077e2500fca017fd08c49c8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...