MAL-2025-190013 Malicious code in try-stub-yaml-query-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7afc6d4f0fe68228645490da6a101c05503ade1edbaa923ccc4560f7632b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

HP Integrated Lights-Out Information Disclosure (CVE-2020-7202)

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information. This plugin only works with Tenable.ot. Please visit...

Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbaufcaducxacags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7649776ab28ab7763b91a79915c95bd48417403ffcf0dfb410edeea328d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10521ebbc7546da459671f9ffd1c8a10b821eb20ff49cdd51e8ed5d36ea5ba88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-ogoa-inumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e770c03fc66224ac50a30317170f617931d5c20547b39cf0d209f874179644a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilisiamo-civufagvuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8306b853f88bfdc9dd224c794f0f2fd828b7bcf317566e8c4b1d49da693f531f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-alai-ava0buku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1ee1e4fcfb6d861a6ee2420abc019a04b93c35f17a482c32baf5c18e011a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubusiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e235fcb48b41d699c5c135e74b0631de4d64ae1b6d0a3f95333434525d4e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1cae43d4dc5b4ddb59927447f7d4eda695844206de5b9398beba5a013e1084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksdfo-alfdaassdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f51fb2bdf548f32b43a9b2a2243c928939a44867e768a280811b73b86f2d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobkaic-gib-giugavsaguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e3283bf6b5f3f20849a9d200ddbe0d9ddaa45651d094c30de2a68bd245ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofifadiahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b530559eb17999e080904c04f92b015c7dc40f11441378bfd71b03a49071c70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugagijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c197a012ee127a2adeaf0793455d0159513cd2359741e1b9618feb7da3fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifit-dabtauzami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192e2e143266b7f3cb210d5e77dd1830ccf8e0fbca3eb206aa7f93e8ffea518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-jf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ace3cc772604f83dbbf111fb45dceaa972811b7830195765e021db8cb1aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-unga-fugiufcagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9d9361497b4323311ac1d1771cb0def3393b7053afebaad76e413f927f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082ff2d66979d0f2b073bc8f2e9812248c01496b1ed3db0a70c2dfec37468b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-duoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e404c1daf42ca7ea9195cf0636ecd76c5da3043dabba1fc7558e1e4965a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...