MAL-2025-187286 Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187315 Malicious code in helios-cressida-biogeochemistry-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0768619dd13d60c867707b16965714e491fc15a027c1e3dec26fee22674eabd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190189 Malicious code in vuepress-auth0-meteor-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3abd4857b3587cf1ea5f38d4882fcf6ee464d5b448188b97a37f8487635164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185470 Malicious code in antares-mui-tailwindcss-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067a0e5dade1c5f0ae6c894ea1e8b4d693b3a1e53e38cd4d80448810ccb006e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

PT-2025-46829

A weakness has been identified in macrozheng mall-swarm up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been...

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

Dell Alienware Command Center 访问控制错误漏洞

DELL Alienware Command Center is Dell's proprietary control software for Alienware-branded computers, which is used to customize hardware features, optimize performance and manage game settings. An improper access control vulnerability exists in DELL Alienware Command Center, which can be exploit...

PT-2025-46895

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

Malicious code in hitale-irher-aeswaeae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace35c5fd9115a193c8197955f96890ec18693de8637424ec920179381910198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobaic-gib-gufagouadfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28930acf59e82384ee4052a1a814454518a2f4123daa711e7f2df34fe67097f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-bobacn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc823f56c7e6bb094742a3a37fa62e0a00e44523c3db483628e97eb7a22187f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-giso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9b2f4e74c5236a314eef0d170151546a9601a797d8ad6a82493575961334fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olios-nol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6e02602305b959db484744888e172ec95a514459c34dafae019f7b429f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183221 Malicious code in kisut-difg-digua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc54d36696514545b2a4f4ab150c00e42ea80517f2f99589cc8c2df19327ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182950 Malicious code in itale-adci-ykhjyafizgantkool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aae0427e25766609aeafea99e7cb5e286e601002870ab21ab6581e2db4984e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185007 Malicious code in sonic-koig-timesxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b5ae92ef5cf5f7a898ee50bf8356005b3ec3ed7a594eb1a4cb040582649ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182348 Malicious code in imodiov-koifi-cug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbfad4fe7e9f9f7610e4d23f4f154a69cfeda95b86110858167de9d640fa3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...