EUVD-2025-138139

Malicious code in avangs-olium-nilvaint npm...

Malicious code in one-kat-ibufadaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9712d7d51ace948ada3d80f10205b20611022512eb8e2ebcddad0cf7b5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-aviggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a953725771909d0c597ac624c788dde71aa4414663981d9238c6ec2de38eaad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185256 Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2022-4983

The CVE-2022-4983 issue affects TEC-IT TBarCode 11.15, specifically the TBarCode11.ocx ActiveX/OCX control’s INI-based licensing handling. Reported as enabling remote creation of files on the host filesystem, the vulnerability can lead to code execution or persistence within the hosting process c...

CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

EUVD-2025-134879

Malicious code in aibola-milomipe-apaaumai npm...

EUVD-2025-133120

Malicious code in teate-thy-sonic-gedip npm...

MAL-2025-180558 Malicious code in teate-thy-sonic-jimhab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547883a364d0554c4a4ccd7833d18cad8669f2d873ebf2b2ca870ec20971ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133471

Malicious code in teate-thy-sonic-bupha npm...

EUVD-2025-133283

Malicious code in teate-thy-sonic-efebec npm...

MAL-2025-179587 Malicious code in anala-akin-niluka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c77fa5d26022830e56ddd2202e49b17e828c09de6f7ab601b621600a7a83441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132500

Malicious code in teate-thy-sonic-nimo npm...

EUVD-2025-132244

Malicious code in teate-thy-sonic-river npm...

EUVD-2025-134624

Malicious code in analuba-innu-nii npm...

EUVD-2025-131977

Malicious code in teate-thy-sonic-zuvgus npm...

Malicious code in teate-thy-sonic-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7059eee4e4cafa5453d01f5e7d327eba941c664644b0061ff024772946b134c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tidti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e99a63bedddf395967d2014455b65fe7065a36027546efbd1311cf7de80e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okalmir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e06255a2bccef5a21ca33d7c673d40956d8b4372578cbeaaf7e0083e99dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minas-mins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f2afbbdc543b1a822babeb49773eb2718210fcf5c04929b40029395a6c6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...