CVE-2025-60701

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...

PT-2025-46833

A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be...

Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842e6c7197064155ba4796581b7130e1c1e8ab7586b0f1ade39fdc9f2d7287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-komfi-cafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf61fb7dc198e99dcfad7398e2fe8e5b748cea89f56f4a2413181ea83b4d3040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiuu-bofauffsni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafe2ba65bdffbca4b1c025e2a54ad713667dd618400e18bb0461f202de65a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabimagavl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b45108e145129d33563ad44863c587fc555ae3698a2b3ac29f77df4ab219f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-foji-gisagabuailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3743809c2bce82ff4e88c4037a638396698490dd8248caaaacd112aef758d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-hbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af35f5c397a7384325edb20d5ea9eb36bccea4e30d6d60df7e56fea1828cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182031 Malicious code in flights-lutuig-alakanjin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa99ecc703c8ff3353434a077ab31c83b35faff5b4930c4e1486f4221e0d4d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183363 Malicious code in lobac-ub-afdmafdacatfeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e95d40dd065d3ac16c6ecbba7f119369702ade4a442006780fb6891633cba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181856 Malicious code in avangs-olium-nil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed3df47ad2a0e0d27324be1b1eb1ed4867bbcd3c89878638a2e0fc04b4bf4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzbdami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84655bdfa4fce4c7da62d1562b3724947bc57f7d107e1ef0154570ec15105f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olialoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467181e82b862b8c9a7b6b034bda9473abbc7c93d7ba2e21b659be07d8f1023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-ifush-ugofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8e18f38edbba8b29d881ed50330de5f917b458ceff9378ee7ba9cf48ac9e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifni-ufavcseqinsdxauban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888f69dddbc6892456541b46993fad8f95453779d80213704cdd054e5da1bd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184544 Malicious code in mokok-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c6dc8e09e5dc00feb7c42dc7cd7ae8d5aa0c483d4e8a3cd1bec073ef2779dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182047 Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182356 Malicious code in imodiov-koifi-cuidcavuaompmng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c35e0d7bc4c8e917113abd332d4e1230e14ec68baf57a4a1a3b0bca8b4d8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184903 Malicious code in sonic-jos-afigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e42b3f408a4059927972a6ccbdb450ea41f696340759b2c8601b0d83466560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181749 Malicious code in avangi-ogolia-inualumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5a7d394174345daac9ba53c7ca8ac328935889698ca5cc0084e8fe4f226352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...