Malicious code in agus-nasi98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66be5a50425cdec0cef31c444fb5dda3f039246434085de5264b332b50f70de8 The package agus-nasi98-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fitri-mangga74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96ae1cddad4b594cc2f5974309d3e8677d11edc691a0387f89facc8f06cd707 The package fitri-mangga74-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewanto-tahutek76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b84b9f73eb77850341b95925c97ea04821f82502f9872084f0ef3e1b5d0b75c The package dewanto-tahutek76-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in fauzi-ketoprak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb77c32363789efa5cbe894fe14139d0248e9d388c39443736d62a3bb0224ea5 The package fauzi-ketoprak10-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eko-kupang18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e16b486b1287475bd6552011a56e541d98eeb549bb7c4c3030379e85e55da8 The package eko-kupang18-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in dian-miebogor16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6684f6396772172c03932a0e0643476f279c1c274feba8ef63cc37fb20a5acb2 The package dian-miebogor16-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50913 Malicious code in bambang-papeda9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ace52aa73c57f03253038f8042bf4eb23112e3a219f24574b720f6ff129765 The package bambang-papeda9-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51628 Malicious code in eka-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e25ae2aa8ae46ca0c034a57beb6a696464516cd86713c468da561dbc2ffedd The package eka-donat34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50354 Malicious code in erwin-tapai13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73680f388ef27c6e94a014442ede09a45b412b272911325e98fb2f4f7b223452 The package erwin-tapai13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50590 Malicious code in umi-getuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed6037001657abba9681e30e3d9dc9a18b23c11d92839f97af0d49f7033cabc The package umi-getuk88-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51166 Malicious code in budi-tek69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bb84fd2547b9ccf66d67a4368c6de423571365c719a0259f051af4cf3d279b The package budi-tek69-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-52471 Malicious code in tomi-rangi60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002cced94b8254267863ffa070ac3ebe5bc8edd461f56cab8712605b194f5c13 The package tomi-rangi60-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in agus-kolak31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cb3402bea860fe47e88e2e59d3ffdd453b7c027257ff02582be2244c0ebc3f The package agus-kolak31-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Shai-Hulud npm Worm

Shai-Hulud is a self-replicating worm targeting the npm ecosystem. Once it compromises a developer machine or CI/CD runner, it harvests secrets and uses them to republish itself across multiple npm packages within hours. This advisory holds IoCs and further information...

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2018-8048

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...