MAL-2025-176498 Malicious code in nokire-tanjiro13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ca5bea346bc3581648d6e6583c40d0ee70bc2ede88e3b0b1991624832e971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175404 Malicious code in kapvino-soni-farsacamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5b2029271db6a8308eebccf1baba93542f2dbaf9ecc6b454ff7ce96d9d6546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-13057 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

MAL-2025-172104 Malicious code in apasih-me-pantekaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2003f0114cd9fdc0e035eb3f28bab044449cf9486291b4a603fda1fb9a32dfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172472 Malicious code in namei-maila-abinaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79768eaac72a043553803c1ae2c2c4daba9fb5d265d6e9c6249ddc8315888a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172216 Malicious code in augis-pod9r-muapilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda6528d75cea870f6189f380584ebfd3ffdc9d7d24e74eb06b1d480d3fdffbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vikassharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce61beaa97ce0ffaeabf2d92c80f76b6f257c937b095c8f1644c99fd8195975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joshuahoward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cce4b043163f50039cd2ef6b1fea715d095a229d5b72e3c54f2a1ce9b774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimannaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9651067ee4c087b5655f869d2183635e292d7ab22b1e6fef7dded056896237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ateefshaikh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375460ec892febffb550010b8ae5ed22c7067e3ae435152cdbd35b77a50bcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hassanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c474490892dc4e0716e55c261f04d09b4490fb86ccd7668df43a6583243e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tariqmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cefa352c6f112e00d9be0ac33a0b088050ec25b7818e6963fd73169c6d65f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170762 Malicious code in akifabid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9957984e554535add547b3f8eac586b0804f2ea9e3411b82b3c3a888df96e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170872 Malicious code in amjadsamra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a64ee4812e7ca68edbd6f26837edd41f8059597bb634f8be5014be7041fba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171643 Malicious code in nebuladreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364c5b68e86877472b633a25642d7c31961f8e2a54dfeb6f9491ee4caa5e56c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24519

Buffer overflow for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...