EUVD-2025-62560

Malicious code in presidentialcaterpillarrequirement npm...

Malicious code in colossal_jellyfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9fc6ab9efd9a62b98d43ce93e69726ecd68f7196efeaeba2cea96e7f8eb189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74020

Malicious code in relevantswallowrequirement npm...

MAL-2025-94946 Malicious code in implicit_pony_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea5cecfed28b2fc1ad9cabd5a8ea66951ba12d1e68ef920498f242826ac67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94348 Malicious code in excited_gibbon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f14c8ad04684896e57b2f1261eddfad48450a7e0940124deeaa8971b8672ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94502 Malicious code in fierce_kite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652b476a4a506475d5f98b451b5180b743d09361607e866c76cf70dc366ac07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93416 Malicious code in bottom_bovid_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97f3ac10a6a71a26d705450439aec94bf1d677057fa59d460133b36d884fa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93831 Malicious code in costly_kiwi_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d63f06fe04eeb9362ef828e0726a28fa7eb649173e0dba6e742c2a6835678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95358 Malicious code in main_macaw_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb57127a5fbd354cf480f5748e8ae30e5bac871ec96c09f951676a258c849c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96270 Malicious code in relevant_swallow_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ea8eb5050a50693db40b965bb4b891b3e83d4daa48cf08b4f75e43ad68654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96241 Malicious code in regional_tapir_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60daf645806ea139a655bc4b8b316a1304bf3d29745a995b60ce1330d9b6f777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62401

Malicious code in quickhalibutrequirement npm...

MAL-2025-96240 Malicious code in regional_opossum_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b50979e6973276f5cbc2b4d5d3fa57fff1594c5f0abcc715302d76703e3fae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97531 Malicious code in zeroth_fox_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b588463c97af4b124871e507c776892dbbdbe49755e9c22aebace8919b3c9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62361

Malicious code in rattysawfishrequirement npm...

MAL-2025-94416 Malicious code in fair_crane_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b9ac4c993b205e6d165d9a9114000c80c5ffc1aa19061153e0dbfaac415274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97236 Malicious code in varying_alligator_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074b1078858bc1d035ad2ccaec2b6252d96eeec68143d4de6524f3bf5f5af2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_marten_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84badca3d660b41d4c4ddf4264f20fa6ab349f0fb97a42cc04b0142fdb8cf23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Intel® Killer™ Software Advisory

Summary: A potential security vulnerability for some Intel® Killer™ Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24491 Description: Uncontrolled search path for some Intel® Killer™...

PT-2025-46269

Name of the Vulnerable Software and Affected Versions Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress versions prior to 1.1.0 Description The plugin exposes sensitive Algolia API keys through the frontend JavaScript code via wp localize script without proper access...