Malicious code in laila-menjes65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473c09657e44b2031c3c590c930634c83ed5502afadd3f02814729ddfa2d63ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92849 Malicious code in zain-tomat41-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19195623064d1ef825651e440452905b8363393c764adca78e63c84c4ade657b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-papeda36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b4400e9e195e09a32f84f20e97413a51e64e30e4925f5d8b5d015e27fdedd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea65856c5691e4e5bdbd16bd6e6088fd98942441541247a86013e41a36474119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b875d9e523a5faac066e49e730bb7438b93959dc6de1c42a0f64d19096efa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klipo23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdc3251af994beaa83e0547e56e94dc0b101c48d0b83d0cfed5c4a04caec381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bubur34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5b5ef2dcb39ea45ab5bfc9e6eb40fa4d1e3e0319d0d3015e743e4cbbafa6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69299 Malicious code in many-salmon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5463e708a8f0fb05a6d933ee1535e2ad0708dce53b7628cf513b1787a41ed881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63028 Malicious code in fitri-rangginang44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9dfa30dd63aec982f2344c05287fbdfb5576f0352ed63c5a8f32a4688d5f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59afbe017c08cb3bbaaec990e4f6abaf919c57837cdad72643ad398a8ea6322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64912 Malicious code in putri-lupis16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36998fcca6b923a9b54fec6c766654e15177f15a33b7fd430e408ae25276408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59027 Malicious code in tuti-peyek81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f6ccd7ab7ad713c1d7660d13fee6787bb2a490718fe5b73e8f9488cc107bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-semur83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ea04bea2b404ae4c2d2ad614c8d51049459f678acb266ebcc120a513652caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54941 Malicious code in siska-tahutek26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434836f7f6257e2296c6e7e3c4c2e0e3e64bf5201efbe37b5cc6ace7f02faaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-getas82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca614e9ce5ac8db76ae8a891321ccda20d735a544b007bf80dae71f632692aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53408 Malicious code in nadia-kentang100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414dffa2be3ddec130157dc9398607b2b571c49075447f17124963881e0e0a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52038 Malicious code in hanafi-kue31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95dc0664a80cf9f749ac9242928c1046dcadeb000d9561457a18ef21d359ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: spiffe-helper, timescaledb-parallel-copy, swagger, atlantis, gatus, trillian, apko, argo-workflows, fuse-overlayfs-snapshotter, mongo-tools, malcontent, kapp-controller, amazon-cloudwatch-agent, cass-operator, kaf, cfssl, bento, gitness, thanos, azure-ipam,...

aflnet

It is an offensive tool for network protocols. AFLNet is a greybox fuzzer for protocol implementations. It takes a mutational approach and uses state-feedback, in addition to code-coverage feedback, to guide the fuzzing process. AFLNet is seeded with a corpus of recorded message exchanges between...

CVE-2024-10953

An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of...