EUVD-2025-177661

Malicious code in neptune-ini-apex-ophiuchus npm...

CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

EUVD-2025-134600

Malicious code in analusa-aki-ini npm...

EUVD-2025-134661

Malicious code in anala-aki-ini npm...

EUVD-2025-134628

Malicious code in analua-aki-ini npm...

Malicious code in analusa-aki-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd27dc07251b4d47ebe088ba06c4a9ad456c519c4b922cf340fa4a7f0bde189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134629

Malicious code in analua-aki-ini npm...

EUVD-2025-134601

Malicious code in analusa-aki-ini npm...

EUVD-2025-134660

Malicious code in anala-aki-ini npm...

EUVD-2025-141889

Malicious code in goodafiun-tufa-ini npm...

MAL-2025-178073 Malicious code in polymer-ini-verst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbe649922eb1063312557a09b709f0850b12ecf21684f2025b76ce62509eee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137507

Malicious code in polymer-ini-verst npm...

Malicious code in polymer-ini-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

EUVD-2025-112518

Malicious code in ini-neptune-mongodb-mensa npm...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112528

Malicious code in ini-cypress-celeste-pegasus npm...

EUVD-2025-112503

Malicious code in ini-vuetify-test-chakra-ui npm...

EUVD-2025-121406

Malicious code in terser-ini-sadr-nebula npm...

Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...