EUVD-2025-178023

Malicious code in long-new-report-analyze-permission npm...

MAL-2025-188099 Malicious code in module-data-secure-psi-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0588a47bb58349ff90bb5ef1641bd09c9dcc5edbce002d0762474874d097c635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177626

Malicious code in new-decode-process-orchestrate-balance npm...

MAL-2025-189606 Malicious code in spectron-csv-dynamo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbf027f428c69dd10d7d00bc4d1e879261d2ddb9873cc7a63ccbbdecde071f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179116

Malicious code in enum-new-encode-tree-cluster npm...

Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the device...

CVE-2025-64345 Wasmtime provides unsound API access to a WebAssembly shared linear memory

Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...

EUVD-2025-135754

Malicious code in tearich-new npm...

EUVD-2025-135755

Malicious code in tearich-new npm...

EUVD-2025-135737

Malicious code in tearich-new8 npm...

EUVD-2025-135742

Malicious code in tearich-new5 npm...

MAL-2025-178988 Malicious code in tearich-new6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a55c742066d674693fac46ce718483fa9f4c3578c07fa0cf800bc89d5ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172911 Malicious code in anidata-hadits-ria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c92dbfacd2d91e3c4795764553310b0d132743aed4cd86d81d0a4ae6b36278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @oppo25/teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153589 Malicious code in avomainah-frid-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744dc867691707e4ea91b083c43cea94257ec233b7c42c95d8c659fa80c36840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170508 Malicious code in verify-technical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6eec2766ab6b56ea02aff183e67137cb626df3df8958bf17be93991b153af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151524 Malicious code in abu-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4494c5bf46e77a1e9137c00d3925bc43e22aab55f297b9a213220659cb6b5100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145273 Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...