MAL-2025-188605 Malicious code in pegasus-resolvers-leda-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

EUVD-2025-122708

Malicious code in relay-xo-resolvers-got npm...

EUVD-2025-115571

Malicious code in centauri-resolvers-helmet-apollo npm...

Malicious code in resolvers-dactyl-process-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c192be33a155577a5f1ff5067fdde8184432d1e576e678aa429d38a8c06b33a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115850

Malicious code in bunyan-quasar-centaurus-resolvers npm...

EUVD-2025-120323

Malicious code in xanadu-resolvers-xml-scripts npm...

Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-112242

Malicious code in jasmine-ursa-resolvers-auth npm...

EUVD-2025-114582

Malicious code in delphinus-oberon-resolvers-kinetic npm...

Malicious code in apollo-deimos-resolvers-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ec7b46ef720beef5b501825b566d56e9bcc122d56d656cf82e0eea918a75a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122589

Malicious code in resolvers-registry-less-loader-phoenix npm...

EUVD-2025-116598

Malicious code in apollo-deimos-resolvers-arcturus npm...

EUVD-2025-122588

Malicious code in resolvers-rimraf-tethys-transport npm...

EUVD-2025-116566

Malicious code in aquarius-fornax-mocha-resolvers npm...

EUVD-2025-124863

Malicious code in miranda-resolvers-wolf-xanadu npm...

Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-xo-resolvers-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f4181308607b8246271fc3e63b1133f84c5650de8e6a0b8684c67e9cd5ea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...