EUVD-2025-106508

Malicious code in attractivekoalaz3n npm...

Malicious code in soviet_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b8ed44ea51ae78e87f83b530d9a460f357f4848278118176d5b5c8d56f843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97173

Malicious code in joko-tomat75-breki npm...

MAL-2025-119922 Malicious code in fadhil-tongseng80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4d5abeb7abc7e990c307f259b685d5d94e6ba0255f753a3d5794f0443a0909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123319 Malicious code in slight_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0f8761c3788c84b04475c580efdc66ab03b6229164280a8bca7d88a15f6e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-gudeg33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f67b0b7e8065a86e6da1e63db5b5762bab202561eec229ab1eed28cfd001d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123567 Malicious code in thoughtless_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22127dab63bde890c2dafe5087afe735b93bcb908e4a9517d243b7d54dda5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105619

Malicious code in eko-keraktelor43-breki npm...

EUVD-2025-105250

Malicious code in financialcougarz3n npm...

Malicious code in nurul-tongseng6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3584b3f649c0d6b5cbc4c79d814590bd3c4a1ffded7f7c0fc115283810d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-keraktelor11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f058e3f6c4b5f3ee448dbe7093d5629d3de45709aab848360d8cc821c05dffcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10005ea196af514d346fc6b00614c19cb9b7780f04c7c63f029abd47e247b174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jengkol72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836bbf6d80999f0c98e37571ab10c8e3dda9f9beb77d9d944d534e85f32639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94196

Malicious code in vina-martabak50-breki npm...

EUVD-2025-96463

Malicious code in mechanicalprimatez3n npm...

EUVD-2025-104491

Malicious code in intellectualcapybaraz3n npm...

EUVD-2025-104269

Malicious code in joko-botok52-breki npm...

MAL-2025-121097 Malicious code in joko-nasipecel57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75558dc7e86071674d9dab0a3e0b609305138720d3dbbd6cbae81b7cbe036fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kea: Invalid characters cause assert

A flaw was found in Kea. A remote attacker can send specific option content to the kea-dhcp4 server. When the server is configured with specific parameters, an assertion failure can be triggered and cause the kea-dhcp4 process to exit unexpectedly, resulting in a denial of service...

EUVD-2025-93471

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...