MAL-2025-60340 Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-soto68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d144e7d94a9ca7d18ed779f594c971358dc3d4662030dac2b1714989dc4ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54482 Malicious code in qori-klanting23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c37e399aeb07ec0e5a36ad4804c3cfd1fb649d3ba2daf1069c5a8753f167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasiuduk14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26f929adf468b0f5595aa2984293b77d44259058c51b679e8bc05a29eee0a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-keripik65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641d591dcc8916554086c3744775cc5b906279731b6cdbc544fe073ff0e92d66 The package andi-keripik65-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dono-lepet19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29362e690edadf049901556fd81d29b06ce41042dc64c2d250b2bfdb5dedb4ea The package dono-lepet19-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in orange-8zg-project (npm)

The package orange-8zg-project was found to contain malicious code...

Malicious code in zsyirwqjgxeopbhc (npm)

The package zsyirwqjgxeopbhc was found to contain malicious code...

1095h-cli (1.0.1), 5coder-pages (0.2.0) +547 more potentially affected by CVE-2023-25345 via swig-templates (>=2.0.2, <=2.0.3)

swig-templates NPM version =2.0.2, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0-beta.1, =0.0.1-alpha.0, =0.0.1 and more Source cves: CVE-2023-25345 Source advisory: OSV:GHSA-2RQ5-699J-X7P6...

Malicious code in esqpostintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c1a0844e2b77d01b904d879d39ab1cfcf99824e9fe01c361067f8399dce513e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1343 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1343 Source advisory: OSV:RUSTSEC-2022-0027...

0.8.18-p11 (0.8.18-p12), 0.extends.wechat (>=1.0.51, <=1.0.65) +10280 more potentially affected by CVE-2021-44906 via minimist (>=1.0.0, <=1.2.5)

minimist NPM version =1.0.0, =1.0.51, =2.3.0, =0.0.1, =1.0.0, =1.0.0, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.14 and more Source cves: CVE-2021-44906 Source advisory: OSV:GHSA-XVCH-5GV4-984H...

@fengshangwuqi/appkit (>=1.0.22, <=1.0.29), @koj/strapi (>=1.4.1, <=1.4.3) +30 more potentially affected by CVE-2021-23362 via hosted-git-info (>=3.0.0, <=3.0.7)

hosted-git-info NPM version =3.0.0, =1.0.22, =1.4.1, =0.1.0, =4.0.0, =1.0.0, =3.0.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.0.0-2020520224551, =0.1.0, =0.1.10 and more Source cves: CVE-2021-23362 Source advisory:...