MAL-2025-75985 Malicious code in vera-otak-otak49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec322eada087ba80b854e02c12097223b5b1f9ec702b3ada10e03c7eb210d4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71253 Malicious code in underground-tomato-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da025e7ab2a6d12f0b2538355a04d071c822c9e2daf4448bcf7ab4d899112759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-azure-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79966acc0ff3ab5d6538f2f6629f0117d35a775e15e348b8368edef51cbe13db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-sapphire-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19a5935a9af3e746f5688e3e458eff688ef190742d5b87a9668314b65d02058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-serimuka68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcbaa06fff35e2076932ff2b7709e6759de3be7bc45c5d8830cdf448e7d83d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f563b8e7798842288a06d60d3de5a65a84740962fda070afee806b1d1772451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-tahutek36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7ce1065ae1f34972e7a281b97fe3799fcbe608ce797d5b9720beb7c983fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60249 Malicious code in defeated_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1941de890329abb0f4620890118be41ca6a2e2c098fa5eed7faa94677804895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kentang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1121994eb9fed5a92c1918bced7cb93f4cd83ee912662dae8d9f45725e092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ronde83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01304424880bcb7a422cfe9ad5f758bb58bd1c8348e95d2514b762887516c6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58510 Malicious code in rina-toge32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ded4945afb7fb2a3086aca2b49fb8a9e3e74c8f422478ad8ea064e63348970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rangginang31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac57c19a0d2535a390b5a465e673b3bb47e922afe7f0d8ed64bd7e5f979c9bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Multiple vulnerabilities in the security extension of the Astra Linux operating system, which allow a hacker to trigger a service failure.

The multiple vulnerabilities of the Astra Linux operating system’s security extension are related to incorrect handling of names for privacy levels that consist of digits. Additionally, there is no functionality for mounting removable devices when working with non-zero privacy flags. Exploitation...