438 matches found
MAL-2025-188206 Malicious code in nebula-init-resolvers-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186256 Malicious code in commitlint-resolvers-procyon-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178278
Malicious code in jekyll-resolvers-quark-epimetheus npm...
EUVD-2025-177676
Malicious code in nebula-init-resolvers-frontend npm...
EUVD-2025-176670
Malicious code in resolvers-typeorm-dependencies-development npm...
EUVD-2025-180466
Malicious code in aldebaran-resolvers-rehype-carina npm...
EUVD-2025-176680
Malicious code in resolvers-chakra-ui-bootstrap-ursa npm...
Malicious code in resolvers-solis-native-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d6c0271bfa31246dc0e28318a0cfb1ce680b0268ea0bf941130328312bcf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179774
Malicious code in changelog-borealis-resolvers-resonance npm...
Malicious code in resolvers-heliophysics-apollo-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60103abfcaa8fc26071abc38c8d81f1d5bd8f1c7ce82c117b98ee3f28734ac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jekyll-resolvers-quark-xenobiology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bfb629499da5c9e01ccc9365672ad6e8c74fb46d6ef77e41e64360a8d779ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pegasus-resolvers-leda-mechatronics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178612
Malicious code in halley-resolvers-quantum-neptunology npm...
MAL-2025-189200 Malicious code in resolvers-kinetic-eventhoriz-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa06e998c3d788fa72d46ef212a5ae000339d3d9b287dfddbbd99d288cc440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188605 Malicious code in pegasus-resolvers-leda-mechatronics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...