MAL-2025-149776 Malicious code in yakutsk-postgres-tool-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8249a23f43ad24e6e3e5262de5dd34c85e91c3d96c59f35164cdc3b1899fb203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140810 Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124038

Malicious code in ora-europa-tool-norma npm...

TOR Virtual Network Tunneling Tool 0.4.8.20

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

CVE-2025-49145

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks mostly administrators can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature...

Malicious code in wibowo-bakwan40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ee19b9ad1e3687a5ca28e380d5b2f1a69698444c934a9ad2e520168fe54e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119913 Malicious code in fadhil-soto8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847a75231f1c6c6eaf0a6cb4455436028bd436bb24c997277911676a60370cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-empal30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569f209dec545b65c6d48af1b4535fbb99a04899ec1c2470f1281d52684b5b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64687

In JetBrains YouTrack before 2025.3.104432 improper access control allowed modify MCP tool logic...

EUVD-2025-76600

Malicious code in imperialrattlesnake-tool npm...

EUVD-2025-76424

Malicious code in lentengstasiun-tool npm...

EUVD-2025-75886

Malicious code in quintessentialptarmigan-tool npm...

EUVD-2025-74974

Malicious code in awaremink-tool npm...

EUVD-2025-76712

Malicious code in grotesquekiwi-tool npm...

EUVD-2025-75829

Malicious code in remainingparrotfish-tool npm...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77053

Malicious code in dramaticnarwhal-tool npm...

EUVD-2025-76094

Malicious code in orthodoxcoyote-tool npm...

EUVD-2025-75982

Malicious code in preferredfinch-tool npm...

Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...