MAL-2025-87754 Malicious code in laila-telurtahu36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034efddbc776e471e5f9d0f9df017e5d09fc14af5b3f9ee4699b748f3e2e454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasipecel45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75796a098d5e0c8a18f24bb51638536c86d3596f54e667a99c58e0fc66c1ecff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80226 Malicious code in near_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163953ec18964f8df0c80a1d6ac56efb17586809072f4ec5f4f28b8435d7cdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rujak50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e83a6cd5d3857675a490ef11a47daa2b564a48615b44cb31c10efcb1a45ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mangut32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a8c27d32c43f81b32ffaa1d926bb19433fc26d5afd0b0e28f490e91b2dcfc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73420 Malicious code in ida-bakso91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2d10e853dec8cef7c0cc0753cb7b022756603463158a8cd55d3289a8ba4aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-nasi58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8af0decbbb9a6746b307ccbe03fd0f8e86aecb488ebd9e1ad975f31ca32cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68009 Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba5c14cf9eb9e31f4661b7700c17f2e49814631c28818d76a573f6a91b871de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nosy_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1002449335059fa65fab8c818bc45121fe11bbefb0f4951fce6bc9645f95a4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee005a707f4125311c55cdd1f2cc7ee6775341d305af2f724b537365b23e163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1db43109d09783797ec6dadd21faf0ac2fc0a709df7cc45bb9c593b8dc7c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53251 Malicious code in lisa-ketoprak17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269fc5326b9641584e2b1747328f729d4b26f66e64a005caade99e909b85be53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-semur27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdcf5d16377306ad8a95c40df2762246414a6aeb183bccafbdf6f4f704031c5 The package andi-semur27-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in umi-gorengan93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e09132c4bb083f3e2587dbb5b13b28cf9660c59ef5bd7d62d6bb9836d662f8 The package umi-gorengan93-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bayu-gepuk42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb50338858c2be29fb883cd3a0651f987ece0db3ec57b1daa4ce96b3826816b1 The package bayu-gepuk42-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in utomo-nasipecel59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418ebb0e86b27ce7db90244b589c494c131c07568325b44b3d835b169b3504 The package utomo-nasipecel59-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

CVE-2018-25117 VestaCP Debian Installer Malicious Backdoor Supply Chain Compromise

VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...

EUVD-2025-33278

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...