EulerOS 2.0 SP12 : python3 (EulerOS-SA-2025-2339)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some fil...

Malicious code in nana-kentang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6bed8a265644246466391301f3703a02f0a749059776572e099ecb09a7211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gepuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53aa76cda196b46f50c016fb2425da46278c795c0cc2334da918696dbd3f014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cf3a6faf59fa6785996986ff0be567ffc6443ff4c9728f9f76b0c830ecb93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32da3d6ef4265d4d4618adbf11d22d961e5771c1cf7d86b926b38c0506400991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-takokak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf63332fa47767c8c10dab12532c3018c5845f3829d57af0916b48c7670d024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-ongol-ongol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ceb83df9603b0e1e7662e4be5714c0a85d7027d20c001e19c93e86c67413c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lupis30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87bb27af23074a493d553f2b667cb8a164a088ee50c32ba8a8f8c3df0911aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-telur98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f772091fd6554c09e83d5aca81dac0829449d318afa6404a027f9ab6b7c0d40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a38fcac952821b5956c208cb3b4e96539c3c97133a601f76c2bbccb37763f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d376a752bddbc6c183e34b074758465f8e36f80827c124dd3e64e774341a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gandul80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb0d85faaf693a8e75828beb37e2c48106eeeea1215207afbb0834e235ac676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a38b8d1fc99b03741752ce8263f3f8f4013fd20d47b6d1d246eb127909f0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sate60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b223a79028294d4b43209ccef30b45eceffcff7b4aa6ef2f9362ca1b36b231ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-lontong46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff91723ea4599a21dde7f3b18c953288ba61edf02c86bac778bcde201ace9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f90fca42aa4f901eac949da3e025deab773192bf543593bbdcc3fdd135885a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sate73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66e5cfb351aa62051b110089f1f3bbf3f9ca667dc60208af311b45b57376503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c32a697fb75d1f9b7978673e11381c61482580f994ccb3b5d7df8457497008e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86109d5c6954fbca6d4674d0dee328acf35514350b0eb11347c0ebf93a918b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137663 Malicious code in utomo-rangi27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8740d8cb9a28bf4a9187a5d7908dfcc2349449f67e2fea765f7e21168013e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...