Malicious code in irma-kue97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b6319bcae58b38e2a88bb88b07537d4c4cf93ab82bc771a900d9707d09cb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130071 Malicious code in satisfied_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53ec5a47a16dc828bf3331cbda6bc891392132fefdd7dc017405be52bc22084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-dradag52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e09b0ed1e4dccffb8250837412070043c924aed8806ac00f4f3d2ebce7fb8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3374d807e0d266a2f45f55f4c7fffd432fe025f4b3e9cd0a61bfad32aecbaeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131779 Malicious code in zaki-rangginang63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bf5d62eb39a44d48d4cab034051bb995d7e42c0679177cd394091aa3d4fd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0be051a156d0a4e66a741bc05ede2e50cac91c38a2bbcb1a9d1dbf6ad484f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125586 Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126910 Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130375 Malicious code in superior_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa03e31f7d5c4b684df82d93ff019b4af52caacc7c911fa1621e9dce848f3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124060 Malicious code in vida-teh27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8a28a117d94b4aec8730cc882f2e019235a8f24d84e39ec35c1ffb67aaffc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122847 Malicious code in remarkable_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ed7fa49d412dd704e133d61fed85ae81bf058ee8003660259255c06119692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122725 Malicious code in putri-tempe83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08de25ba0575953b0ee57719e58a1e02338c0e86a962cb4e879f7b65ceb0bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-serimuka23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d051c131eb2399c861de59695f752ad4d81ba36240daf18f25b97b70175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gado-gado37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28933414e32fe2a3465af461f2fba1837d250d1629cfb2edb8a0e46a2201891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123504 Malicious code in tania-getuk100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c93eda5b74281b00652edd6b26dbd2c74de6c347e543b0991643246e0b75dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-liwet67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa737e6c62c8dcf4fdd142d31743a4e6d9167e290495bd2577d4bf4d2bc1ab32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Microsoft Patch Tuesday, November 2025 Security Update Review

Microsoft released its November Patch Tuesday Security Updates. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for November 2025 This month's release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month's update...

EUVD-2025-93498

Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

EUVD-2025-93445

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...