MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101581 Malicious code in diplomatic_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aed083696157fe756de976295b47618a9b4d02a136f0729b186d37b888e9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d21725e4a8fbefc05d9744a2826534385696773edd510f049835e42e6adc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110531 Malicious code in vina-kacang7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb829e5a5375c2e0627892ad1e883eed7451cfe0d7f62cd32d62067c4b987bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106579 Malicious code in ogi-mangga89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c821217f4697f7547f5f0560bc7cd0f208da33ffac109b7f466428194f809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0886ea924a30656eb7f7b403882baa0a6774151616357c14164c4ef25aa0dad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96320 Malicious code in resonant_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca5f82f263ef5fefa17b001a80a8210fb237aa757956400202e6e846fac6b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sasag63-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4b132cda6ecc85d441477ffd6d64c769e1b5b016fa5e9692e16a4641d0d1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92509 Malicious code in yanti-kue92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55789125ccd2b085df77ac2d564bb961cff68616b402525451d237756fe65427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rujak6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba13e7b2a7d514e7474b7cba9da1c74748e7912f25c2c1128fa18142fab76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67369 Malicious code in complex-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc346b51b32e89fe8756cd200d91de53ef6c0e01b28cd657ec0aa4d8894030d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-lavender-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ca2df1d61c834758a40800aac04a158c356cdea14d763bbcb25d8205d531b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61758 Malicious code in ade-lodeh100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996b5c0978a512c4c6d5bd9740f46b1c7a72e33e68356a714cb57eaa968a1f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ROS-20251111-10

Vulnerability of processsymtab function of eu-readelf component of ELF Elfutils binary modification and analysis utility is related to copying buffer without checking input data size. ELF Elfutils is related to buffer copying without checking input data size. Exploitation vulnerability could allo...

Malicious code in usual_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3809b3e4a04154f02859a870bdb29bd911bc5c1e58f539cd1bc0917c9544139f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55291 Malicious code in bambang-keraktelor41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9828b0b80bb5e96dcaf802b676fe5ab025d06b0d1106655e5ed27d9e23a26e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57946 Malicious code in ocha-rawon96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66dbb11713d910dfbd903faf2e953f0fc0d9ca854219ac0c80cc1949820055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

UBUNTU-CVE-2025-64184

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

PT-2025-46654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Transport Layer Security TLS asynchronous decryption. Specifically, if the tls strp msg hold function fails to allocate a clone of the input...