MAL-2025-104930 Malicious code in kurniawan-dodol24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c4b55ed68d125ca223e5c906b30c8339df3398d55499223f3213e3a42e966c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111382 Malicious code in yuni-kripik1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2b697dadc723fd29a1381cde44090e0ce00731a8b8d87ad69daf2b5841d6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f7a7a2015d5e720a64f2cba05497bb8ff926712a71629c606bc183a043609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70023

Malicious code in hanafi-semur56-ruro npm...

EUVD-2025-83337

Malicious code in yanti-kripik62-ruro npm...

EUVD-2025-69110

Malicious code in maman-lumpur4-ruro npm...

EUVD-2025-70130

Malicious code in hadi-lapis35-ruro npm...

EUVD-2025-83011

Malicious code in adjacentcobraz3n npm...

MAL-2025-104677 Malicious code in joni-kacang37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ee5e796c1c1850f60d1578302cf9d699914c38dec1807eac73f24d96c3c02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71026

Malicious code in citra-rujak99-ruro npm...

EUVD-2025-71046

Malicious code in citra-kue55-ruro npm...

MAL-2025-100496 Malicious code in cindy-ubi79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7d0de945f62db748a9bea39702e7e58b11b933f9577f8691493dd92088b9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104325 Malicious code in interesting_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def8c5200750d4145bb67447129fc36490bb18f560863482658de0fa6615e25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8108

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

Malicious code in troubled_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6211a2c53bdd3635b89c896393f92e29b3c7fd2e6e62757a9c35a8e50c9a8332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71307

Malicious code in unlikelyanglerfishz3n npm...

EUVD-2025-71663

Malicious code in bewilderedmarmotz3n npm...

EUVD-2025-71522

Malicious code in isolatedlampreyz3n npm...

EUVD-2025-71666

Malicious code in associatedwoodpeckerz3n npm...

MAL-2025-98597 Malicious code in absolute_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd5166d9671b235ca3f992f84668d48d313973d58eb53b133c7fdd9b991cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...