MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

Siemens SIMATIC S7-1500 Insufficient Entropy (CVE-2019-15847)

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

Malicious code in flights-ilutg-idaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f11d81ca795dfaff6343ce2818b0cc22dc2d230a6e62fabd10874586b6e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olika-tabalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d086c1c586538b1ccfe42ba793f79b0dbc0d467933d06316c45a71d2d3a198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-aggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2b07d4c22c5981e9e29cb7dcbd5a347548287d5f6a2ea7485dfa6f6c51c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kjt-garvimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4141331f7de023b02c68cd4dbe105c7379e5ffefac756d5d95cd1786f4740050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb34fb48320ba52b872cebf586c29fafa87d37b4a9f0c3769996d335cac3def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigfagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b7b65ab3af393482d0ecd44e8e5717f9e3d04b767e905c72ddb5346ff44291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e7902fe5de3e94bf90dbf988b24990628b0e9deab7ba6d2236fc662ba42fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a038ef5280f1baab03b009747ac2decea57881d7b7bbb08f6253ca3c666bd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryygbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7821c3d2ed17b7b7532216a49ef429b80fef471444aa3197f0a4b90e010c8b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-ufisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06c2c3df1295b25c44608ab420f61d42d351f781f4f5e5e3d51a3f56b2e26a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4665eeea91c995463ab53b5921d6875ef2cc60091925d505e7ee6d3da5cf11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiy-ajvoig-daicutafamajjauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbd0d9254d35e1f164bf5580e528322225bb809b3e3d3254335a8548f466077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucafbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027964f95c334c71c2c8d0d3d5b9f2fb19a999e90afd1ef3a761cb77e023647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5240da5c0ad994a4d5c2555e6dcf9436b59f9b4c2a876b28abbb4a305304dbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diug-danugamifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a1ecb444dd60c61287d188271161f85a805e7149db66f4c1776fdd066a348f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...