MAL-2025-121077 Malicious code in joko-kue97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8b133419f96def9d33d77335dfd7087116c060919857fde7136c185073ae82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4715b372138b03a75b1b19a8794fc04bd3b3a67a6ec1e4d7395c45d257debf11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 953628bdd6c14760f5e722475c8f45c08ca1910cca09b80fefed048317c53623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-semur3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950167468591677898935ded69acac20a7424ed64cf340865884f5c681917dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befa7068bf47e4a4b67f14c80bf46cce3426d1dc8b04bd925d3eb84d1cfdfaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-empal66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26261e682eb98b7f9d3d0995934f52d23efdab769a90f40464d4aba62ea80add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-empal49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1faa2644008100a6adbb7c5cb899926b332cbea5131db6b51ffeb1e26f8a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-rangi10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3747439deb944a4ca389576eb9f0a2568bbebc8999cafd3b8d2418b9c38ad59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c76878e192addd11503da49704b65ef88cbd62303f15d88a6fc49db0095b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tomat15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18aaca94e7e8a3bbc8e359e27c6f18586d9eb147a0abbac7c876e15913ce062d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sambel61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4e0bf3c95c77df2750cade4005dbabf0046d47ca63aaa4e6d9f7568f6d4356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-dradag94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cef55f82c00329f6d5f70a74e929d78ef3abc5995a87699de7144f647e91eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118723 Malicious code in andi-sasag40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921089cee8429d30cbc87bacfe2c90a3bb74a06e37c67a7a6e5701e6f11f1e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123606 Malicious code in tiara-rawon75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa241ecc70b44410def3de307836b03aa4bf81d752feb8d8e2208c720d582602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124096 Malicious code in vina-lengko64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb30ab29282b623e3de356e642bf96ec3a9304a82adf0b9a3de3e0bfd93ed784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121878 Malicious code in multiple_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb16a8d30c7822faacb5e3997060cfb215782a100b6a6256079e0bbe1430368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...

EUVD-2025-93479

Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This...

EUVD-2025-93493

Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result...

EUVD-2025-93512

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...