MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a320351588676a7c196e008492aa20f3bfbd720dde9f24cf7e926272181cb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67243 Malicious code in cloudy-maroon-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04f9771977b6349dcd3db5cbbee4fd610db7728c8884f62f58da041b940165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-green-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7d76f2a7194ec968048ce9d89e5182e8bd1e37ef1505ea1dfd35639ed22f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889a8a9ffa8c79f253223d9425ace4a01ad172023f9fcd9b06e52bbdc7516491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63224 Malicious code in hadi-kepok66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a328acaad5e2f7c9f1309f352c39e6521e6165d3fcdadfd2dc85e4eac72e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62433 Malicious code in determined_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69e18fd408c5283225366724482711948653c1b85face039baa9d461ddba96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65181 Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63267 Malicious code in hadianto-kembang70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc691ca9220f567add7a9e3aa34f9f92ce6d95c7c434078755af0f0a5df4af50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62956 Malicious code in fauzi-klanting95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b646f6ae7dd7850c26f8d4951778ea148eab745f46d8742a45c7ebc39c9613f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

QNAP Systems Photo Station 安全漏洞

QNAP Systems Photo Station is an online photo album from China-based QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A security vulnerability exists in QNAP Systems Photo Station versions 5.4.1 and 5.2.7 that stems from a security issue related to the X...

Intel CIP 输入验证错误漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an input validation error vulnerability that stems from improper input validation, which can be exploited by an attacker to cause elevation of...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause information...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from mismanagement of privileges, which can be exploited by an attacker to cause information...

Intel CIP 代码问题漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP has a code issue vulnerability that stems from an unrestricted upload of dangerous types of files, which can be exploited by attackers to cause data tampering...

RHEL 10 : kernel (RHSA-2025:20095)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20095 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsa...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause an elevation...