MAL-2025-178335 Malicious code in riya-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b242b52d9418e23dae524f2b61b2898968256b8370312230aca697626d6f73e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

CVE-2025-31937

Out-of-bounds read for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...

CVE-2025-26694

Null pointer dereference for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

EUVD-2025-148231

Malicious code in tealove-nokire6 npm...

EUVD-2025-150161

Malicious code in syahmuda-poke6 npm...

Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168482 Malicious code in tealove-nanami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271401ffec55d65d0d3e7c29d452cada2a2b8ae92ba9aa4860220950ac5ca99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152476 Malicious code in alvira-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17419d42bc6d0c28d4950f1953de4ca0bcf8455ea56485621468a3a61e3a9630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165980 Malicious code in siregar-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25741af88aa1e88589cc0afb37f17f5f986ccffa45c0eb55941395e5c6ae462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156081 Malicious code in icha-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a81e84f35e15ae3eed7e225e4aef7ccbbaa353367e2f19f9e86e9a194ab0d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162474 Malicious code in nokire-arjuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7739a9d588398490b021b5fa76dd895054934e1404fb6c1504a6b1409054955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146214

Malicious code in yuda-6 npm...

Malicious code in aril-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef139d50b97f982a8449e25625e946b5f147806f7cce9b39ebf8fdbcb40218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148452

Malicious code in tealove-lady6 npm...

MAL-2025-162756 Malicious code in nokire-korean6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d758a85b4fa3fc5e3e3b99faff1f01dce05b5ca783681f6d14b80104cb741b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594bbc4fb6894f768da794e478a190cdfbdd078ac821261272e2def5cdba07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1ade48fe4290b0f6e6e4bf4d743f0c59d7d0728912a309989938d023942be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...