Malicious code in ultra-ws (npm)

Source: amazon-inspector a3cd852fb9e34a4705cad99a8022db52461e1325daddfa1425df17bbc3b7ac08 package.json declares a dependency node-net-pool whose source is a tarball URL on the main branch of a random third-party GitHub account...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a document creates a sandboxed iframe without allow-scripts, and then appends an element to the iframe’s document that has a JavaScript event handler—the event handler will still be executed despite the iframe being in a sandbox. This vulnerability affects Firefox versions earlier than 97,...

Astra Linux – Vulnerability in Zabbix

JavaScript preprocessing, webhooks, and global scripts can lead to uncontrolled utilization of CPU, memory, and disk I/O resources. The ability to preprocess/webhook/configure and test global scripts is only available to Administrative roles Admin and Superadmin. Administrative privileges should...

Malicious code in joko-klanting57-breki (npm)

Source: amazon-inspector 0c428c01fadb33d32b8b138d77fb04ac1c17b0f9dafd1a392bbc904447537f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting70-riris (npm)

Source: amazon-inspector 6e98d0c77d583b569536c9ed5708885ae720ffca47de2046b862532060be8fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak70-breki (npm)

Source: amazon-inspector d1f69c051add2ae3619e6903f0261bf62c253b5095f0c95abee5c9c54f25ac83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting72-miaww (npm)

Source: amazon-inspector 03dba51cbf38ac8e5cbde1fbecfb2182204285b77564de32f21203dc936f9b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting28-sluey (npm)

Source: amazon-inspector 3186fb531c97a5c8f8d341128ac55a50ac9f5e14ed8ec769e14c2cf80e21f0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-klanting55-breki (npm)

Source: amazon-inspector fcd00e3a02dd3249203d511087599b3d08f8fa63ce46249bfe3d6ab12c008a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketan37-apidev (npm)

Source: amazon-inspector 128bd546b85f3471f53426b2ac30ad0cc90cc2aa82b0b1226c20a032bb9d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik42-sukiwir (npm)

Source: amazon-inspector 686965d4ac31e0459ce1da77046360254bb86ff96c7cc4bf0b3c8be413d55ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak89-breki (npm)

Source: amazon-inspector a3ea99c4b2867cbdbfdc63b2ce6717cd21452eeba12d5819ba2cd25b01dbab4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketoprak52-sukiwir (npm)

Source: amazon-inspector 1b4bfb8a1fb52498204a20a00105747d60d700b54f0984590ef0e52bcc1e6fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik2-ruro (npm)

Source: amazon-inspector e6b822210d09e1ade30e523d6352e97e906fa7745b8bed435a4811e70fa455f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik93-miaww (npm)

Source: amazon-inspector 63f09cec21d6c83dc64d31766d8244ced36913ed220157f1049b1a013f6e1973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketan28-sukiwir (npm)

Source: amazon-inspector d162f92eccd11ebed51dae9de3e28c53fd85d533b2eeeee1edbf78d584e56376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik33-riris (npm)

Source: amazon-inspector dcf0bed9514e47614c83a60dbb66024c349218b5d39fa81b290f8b0beaed8285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik32-remi (npm)

Source: amazon-inspector f53f90f3173fc3d3dfc4ae38905de061eb9463dedea27fa656343e3d6084fd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-ketan29-breki (npm)

Source: amazon-inspector 90db5dd9648bdd847b2f48bbb786f514f6c439126135ea1ba1f3c5c56ae20cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-keripik82-riris (npm)

Source: amazon-inspector 86657c188ce9ec276a31daad0b83bc2b4d38212ffac70aacf9561456e10a82f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...