MAL-2025-133542 Malicious code in fitri-pecel52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0881068cef42d8258ed8a07eaabef896fd4d9d801445ece8116a8dde14b5b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rangi55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab09143a93e1d06ae483b72b5f11e68a93f33603818cb9fa8538a875721a4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983448f06628972857768a1228a8d080ccca7d2a65d0b309f93e01121b1d510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138379 Malicious code in yuni-semur29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba76e8088bff11c6850341269c224e4502b76e1c0af232ae83a5e7f899af84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135028 Malicious code in kurniawan-ronde74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d9e4025447dcf5397d843a77d7dd24fedd9e363e952fb5a479862839fa4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125454 Malicious code in cindy-rangginang86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342150718a1de1a9f25cdfd09557e258631aeae14023159892bfa64a90788bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119565 Malicious code in dono-liwet34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8481a2a9c0ebd2a618c851c0be5a29cee2a2022293ef88aeef3b779fc8b1db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b82094a78dae699b820e5d16b857a322eff36bd9cbfc3f2762d83fef032cb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116558 Malicious code in putri-lodeh12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a380748305829a37237c8cea34ccadfc6b42bde78e789269d0df08b704db217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89370177a218c952376d9c7b9ef34d2841a0c27e9764f96b732b94bfcd27127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88715 Malicious code in nana-ragi15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608023bd1b6965e008fea8cd7dfa2ac1b4594a18148a7e8586e9c09b7313febf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jamblang10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62e5614d7280db90e44c4150fcf99344f477b752fe4caded08b50595f845b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-botok69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54a3fd62e0c561efcfd1a40515e945bedd3faf8ed9238ca647caca2b002a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83950 Malicious code in cici-mangut3-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1639d25b74f17a935b363e6d81c6b6b594c3bea345ed1ce9d4b3b1dcf885fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-soto68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ac0633e9048745c0975b07c8afeebb6b679771addd9ce69df1fca013e07897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-bubursumsum85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c16c2af635c11b20fe31e673cfebc39eebdeb943fd0334599ea6932ec1c28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

DEBIAN-CVE-2024-27006

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Add missing count increment to thermaldebugtztripup The count field in struct tripstats, representing the number of times the zone temperature was above the trip point, needs to be incremented in...

SUSE CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...

SUSE CVE-2019-11388

An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with nested repetition operators. NOTE: the software maintainer disputes...

SUSE CVE-2019-11389

An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with next at the beginning and nested repetition operators. NOTE: the...