Malicious code in ultra-ws (npm)

Source: amazon-inspector a3cd852fb9e34a4705cad99a8022db52461e1325daddfa1425df17bbc3b7ac08 package.json declares a dependency node-net-pool whose source is a tarball URL on the main branch of a random third-party GitHub account...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a document creates a sandboxed iframe without allow-scripts, and then appends an element to the iframe’s document that has a JavaScript event handler—the event handler will still be executed despite the iframe being in a sandbox. This vulnerability affects Firefox versions earlier than 97,...

Astra Linux – Vulnerability in Zabbix

JavaScript preprocessing, webhooks, and global scripts can lead to uncontrolled utilization of CPU, memory, and disk I/O resources. The ability to preprocess/webhook/configure and test global scripts is only available to Administrative roles Admin and Superadmin. Administrative privileges should...

Malicious code in joko-klanting72-miaww (npm)

Source: amazon-inspector 03dba51cbf38ac8e5cbde1fbecfb2182204285b77564de32f21203dc936f9b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting28-sluey (npm)

Source: amazon-inspector 3186fb531c97a5c8f8d341128ac55a50ac9f5e14ed8ec769e14c2cf80e21f0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting55-breki (npm)

Source: amazon-inspector fcd00e3a02dd3249203d511087599b3d08f8fa63ce46249bfe3d6ab12c008a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting57-breki (npm)

Source: amazon-inspector 0c428c01fadb33d32b8b138d77fb04ac1c17b0f9dafd1a392bbc904447537f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting70-riris (npm)

Source: amazon-inspector 6e98d0c77d583b569536c9ed5708885ae720ffca47de2046b862532060be8fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak70-breki (npm)

Source: amazon-inspector d1f69c051add2ae3619e6903f0261bf62c253b5095f0c95abee5c9c54f25ac83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keraktelor62-sluey (npm)

Source: amazon-inspector cc7b21693bc089b0708a0c1f24c0a012008c4f36670390444d4e7ba88b40df3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak99-miaww (npm)

Source: amazon-inspector a88dc6b142245af3d9122e3145439f9e6bd22b8f83870bf93b806f6c7c617c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting26-miaww (npm)

Source: amazon-inspector df9abb00f54c4cfc1475822ddc6e84c94d29f777c93910845b7fdb6691cc3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak59-riris (npm)

Source: amazon-inspector 515efe51b6a0a82f5328ed22eb719027c5985b9254eff36714417707d731e98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketan75-miaww (npm)

Source: amazon-inspector 925bd94d4190f90b45ad8606e1297b6932306cdf401f118f63ba5d617823ede3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketan37-apidev (npm)

Source: amazon-inspector 128bd546b85f3471f53426b2ac30ad0cc90cc2aa82b0b1226c20a032bb9d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik42-sukiwir (npm)

Source: amazon-inspector 686965d4ac31e0459ce1da77046360254bb86ff96c7cc4bf0b3c8be413d55ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik33-sluey (npm)

Source: amazon-inspector 8742c3c024db40cf8ac0474f8d70e778a998a90faec75737c4da30a30ba95856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik1-apidev (npm)

Source: amazon-inspector f15d372f3ddf153ff1dfe58c47b57850f095d20cbdb5e967ae4edb71dace48e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keraktelor76-breki (npm)

Source: amazon-inspector c60d198d25f4a087d4de9d05183d71ef7872ab30d1e26fc9a812f734d29771cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak89-breki (npm)

Source: amazon-inspector a3ea99c4b2867cbdbfdc63b2ce6717cd21452eeba12d5819ba2cd25b01dbab4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...