Malicious code in poglymer-ognagh-ami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599504053a22e8e6443da4a3c5c51c7c24bf531255ec749ff10653077b8ebde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4424e8404da671e20f58b1df67ed3e9a2f3923b9edf1b88ec65f8514ab92590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141423

Malicious code in hunimi-satihu-anagi npm...

Malicious code in nuilva-bavaim-madibvacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299925943917168945a6e8bca08adc53d36811ed59f8e631de1093dfbf917f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139029

Malicious code in poglymer-ogahih-faigafc npm...

EUVD-2025-141541

Malicious code in hitachi-poke96 npm...

Malicious code in buis-masi-mabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138395

Malicious code in polymer-avoafifa-faga npm...

EUVD-2025-142804

Malicious code in buta-fs0boiuna-gauafiooifa npm...

MAL-2025-178142 Malicious code in polymer-tusy-sesrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d317fda58b1b757c4711fbbd7cc1b8906bd35d8e9b2b99f8924abc315603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787187267cce8387534bc7f62592c1953e12396f0bbdf1ae313936efa1e08f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-saf-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df94a684d7369ef7240eedbccb1251c48578ec7f9d80a596dd69ea55094ecf93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135286

Malicious code in tray-uozp-eraty npm...

EUVD-2025-135534

Malicious code in thambi-vers-vesd npm...

MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172902 Malicious code in anidata-hadis-re (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24deaee11dc66c42010f3f218a3c6b60ac2e4375effe64ebef41f4d4cebfa508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142988

Malicious code in buta-faag-saigafa npm...

MAL-2025-177896 Malicious code in polymer-butyafsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed97e4950ae8c5679fb7a2c46bcda1d41c15412e97684ecb1bdf0024a8a35bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

EUVD-2025-131923

A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...