Malicious code in tariqmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cefa352c6f112e00d9be0ac33a0b088050ec25b7818e6963fd73169c6d65f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170872 Malicious code in amjadsamra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a64ee4812e7ca68edbd6f26837edd41f8059597bb634f8be5014be7041fba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171643 Malicious code in nebuladreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364c5b68e86877472b633a25642d7c31961f8e2a54dfeb6f9491ee4caa5e56c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170762 Malicious code in akifabid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9957984e554535add547b3f8eac586b0804f2ea9e3411b82b3c3a888df96e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24519

Buffer overflow for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-taila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b8f24d989798f4fbd9ced8182b0ce214ddcb3bd1ffb38d5fff182f3b93ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikuk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a839ed52803036cdfe870d7d413a5427d83061600dead9f4be0ec340286e2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nyura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52de6f83e78eda3b6914ddff040e23fa6bd316c3f92b139de3fa4ce2adfc8b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d0d760ca3b3c90a6341dd57f909611ef2b79de32da8c0a687e0473d3e8686f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87616c537b7c71a30dd6fc5765707ddbc9d142bc7c8136efdd249e3f08ec4efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc00fc3ff21eadd02118c2bb68317eea1c5cb49457c7881f2dbc4a26532b1b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d6f8e44d1a68d959a0802ebf0ffece5da4ec196d0f957ac11bca0c4f7aa9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef3d4d6b9e4e9ea19cb884050adfc3aa2516f5a24ee26bc89c3b0c1cb893e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-aiagfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da302d8156d22ba880dfaf66a3f205c52f23e6a735c5cdecfe4c13b2209e38b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-ytu-nama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ce56428a021dd52ae11aa8026eac08967f6a62abfd668880272cb1fd220e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274d69b99ae3d96ca40e0c33bd46ec594737853a7150d2045c392679b9d83d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...