MAL-2025-64438 Malicious code in nana-bakso43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb933e2d1d1ff3fcdd7bcde5ecdc3d7073d130d7dbaeac6ff729a2a77189ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-lapis87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377ef4477ce1d96609bb4981fa54e995376f8604d2362c57c6cd6f7246881fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-asinan93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3569e7163c4531eabbc5d70a50e667d0a8a96f7ea9fddb334d4825be16de96b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56605 Malicious code in hadi-saguer89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f907d721970884ca52e516bdb11d875db612e640647ff0705f0058d20c7cb979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59816 Malicious code in zaki-rangi52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908483934485e943d9cbbc4fe78f34e2c56f03555155cffeff9dc87faeecaf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989b2647ecaaa4f02d7e56c2dc843b6b24ac671e3ef7a454a409018e7c3e0fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brengkes77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b87dded250c394502f84468879c09e11b07561bdfbdc152ce5090bef56127f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kembang11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121f6337e969b21e5299de5acc69c7fc0b9817accb326fad07118600df210554 The package gilang-kembang11-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Authorization Bypass

libcpan-checksums-perl is vulnerable to Authorization Bypasses. Checksums generates CHECKSUMSs recursively for each directory under the author/directory structure, and the file path does not contain an author handle. An attacker with PAUSE access can trick PAUSE into generating a valid CHECKSUMS...

CVE-2021-32556

It was discovered that the getmodifiedconffiles function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg1 call...

PT-2021-6079 · Rpm +8 · Rpm +8

Name of the Vulnerable Software and Affected Versions: RPM affected versions not specified Description: The issue is related to insufficient authentication of data in the RPM software's signature check functionality. This allows an attacker to potentially corrupt the RPM database and execute code...

Code injection

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...