179107 matches found
Malicious code in eka-esdoger85-breki (npm)
Source: amazon-inspector e4ddd04fff662dea6152bcd7305206d69dca0112d558bda1ee827853c6573542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gaplek84-sukiwir (npm)
Source: amazon-inspector cf903a7bdd223441fcd589df86c781c90dabe37e30d72c3e9067ed36b9c61566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gembus41-sluey (npm)
Source: amazon-inspector 07f52255704d964f43b7e3f171c7e7e843ea9f90cdc1e6afebc3c836f375232f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gaplek47-wekto (npm)
Source: amazon-inspector 0f53821c8fcf98b96a0f4ab514090e365e17a48c65f3eeaaa722276010e2165f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gado-gado1-breki (npm)
Source: amazon-inspector 8f0682902e19297b1978104c83733c97021eff61910a6b01c13084873f225be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gembus55-sukiwir (npm)
Source: amazon-inspector f6e7e9b54bc9c0111d3902b5db42cd00bfb511c042d65ebd27611f498a435cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gandul39-riris (npm)
Source: amazon-inspector b72bec4426e26f82d3d9e1ab388d43688e9d9af59c36c4c7c534755c1f44c63c The package eka-gandul39-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...
Malicious code in eka-gaplek21-sluey (npm)
Source: amazon-inspector 90232c1f506764e93cdfc783711f78cce09a5607cc3165219dbc92ace7adb4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gaplek76-sluey (npm)
Source: amazon-inspector fa768bdee917ea1483a7dde6adaf2ffe4b77b1843c6836646bb07576a513081a The package eka-gaplek76-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...
Malicious code in eka-gandul91-remi (npm)
Source: amazon-inspector 8b8ac30e9f329ada0bf7f8168b4b590770378b4d593c3ee9aef679047f787cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gado-gado71-breki (npm)
Source: amazon-inspector 59f187ef4b7ad9c28f0ccf5978023ce7e3325649fcf5cc8119a2f231ddf058f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gembus49-miaww (npm)
Source: amazon-inspector 51a290b52a939a3ee0a45fdf535bb5c245a12364047c1268a8ed8086dc7d61f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
PT-2026-89393
Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...
PT-2026-89398
Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...
PT-2026-89420
Berthly 1.3.1 is out now! Adopts apple/container 1.3.1, a security release: CVE-2026-65388 plus five more advisories, some in code Berthly links directly. Authenticated plain-HTTP registries now require HTTPS. https://t.co/nfZ5l6OziT...
CVE-2026-78574
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...
CVE-2026-78574
CVE-2026-78574 affects the Okta Hyperdrive Integration plugin , which resolves a required assembly via a registry path in the current user's hive without integrity verification. The assembly is loaded through Assembly.LoadFrom without signature validation, allowing an unverified assembly to execu...
EUVD-2026-74175
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...
CVE-2026-78574 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...