Malicious code in juicy_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb6b0db9b2b95cb9ef2a060fe02df4474f136ce0a5190303db0c60ef4a4c25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82464 Malicious code in xaver-sate90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821e4188f6b587a76235f70fafb87a5f1f8ea1192314cd9e738717cfba83c695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73013 Malicious code in fitri-tapai69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b888cfbfd6d9683fb1664ba0966e574f6145ff4899d418845e7f1a4b49d6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73934 Malicious code in kresna-tapai91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9ac32dd12de8f3d3d0852b459879badaab86352604a66d5c1d22157fa7e8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb5c7e78885ddd71ecac9129f3300101465cfb9cfd5fca1b897c1ef54bf4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-dradag64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a5ef957513af41adcc08b3a7e13cdb53bfcc1697a6ac63e6a8319dfd6ec84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76387 Malicious code in yanti-lepet98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb1aa23bd14caf71acbc0dff988c6671f845bcae7eaf5f72e3dab8961d9163d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586de2e35af549d359f672e63416a8de610675d5b0654bf77b5da1d36683120b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70243 Malicious code in redundant-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad842ebb3fc7d678631d2a6e474070faf44e64828321f29659cf571412b7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-gaplek65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fa4ee5b1f27d92aba7c920a577b7a4da239591f7958f5a3f344b064ba5eb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-telurtahu72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2748632875a82036827092a9201573ac4dad04ed7854a3d6e5bce6edff4f1270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61721 Malicious code in absolute_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e676bfffea9c53aa1fa41ff92720aadb74ea08869fb8259338db80688b66d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66181 Malicious code in wibowo-tahu32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c067a86d952e6444a8c884cfe46bfbab3aac236864c529e16d0c92b66a0a27d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568d01c45358e9fa1ccef686a3810fed8c6b29c7046f0b8c81c1d09f2f6fbcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf685243db07a3caa77f7d18b62d449c971dda664851a12c62c07487cc9d0e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lupis59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374b3f2325d16fc58715c39bb7400e6c36912a35b7cb4a519f47ac8dace39ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mieayam41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123562497f15204d9483ae778abbcc5960405f06ed61373cb9fc430cdf82d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-28016

Malicious code in bioql PyPI...

EUVD-2025-25434

Malicious code in bioql PyPI...

CVE-2025-9696 Use of Hard-coded Credentials in SunPower PVS6

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...