MAL-2025-130059 Malicious code in sari-soto38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1594a7725b6df2cc1298bbba838d84c619ef52b61884e13682e7386aa8a238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79b930172d56927a239f8a17c18a9786f2a25fcb8c03e584b88ebc0488ff0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3829c31e4e4986604ce13363b4da8e007a55090744d4ee774b2d1cc4f6f02f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99408 Malicious code in amused_wallaby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6256bfc25f366f2392b906a6863019a2699dbb8d1d9c12f2f141b6f2d017dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-nasiuduk41-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e3f0cd2f6f1b6c524b046ed2cda9b308f88281b8dc6fea85675cd48865a49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795b05a0355bd532b62fda4e0782d7604b5368c879e3ebc69c39cf85bbe889d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-peyek13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7d428eab8c7c93c9848475d2f154cf15b75839f2994126f77c12bbb48817f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77964 Malicious code in erwin-gudeg9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5dad7eb038d77e647a79cdbb0ebbf64f439acf3891fc45c1e392cad3a6ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bubursumsum74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5092c674dbcb1fded41ec5d2c0315f20e2404cffc67b72b2bf70d75011451ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64035 Malicious code in lina-martabak37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4051a0de68cf77c377329fd4dca4fcc4653f2f5a7793eb87d46247465b92e030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768542d50a93d0786cea9f5c5c899efe76d9911ff30e9b67be497b3658d11309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58374 Malicious code in revolutionary_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1648629b492b6cee9601c638925f9f790065c25c25fa56da1c50da7180f9eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sroto46-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c562f551c1e8848109cdf3168eacba0dc60139f137d0e2c37e8dfc808121897b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50183 Malicious code in dewanto-gudeg1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c16e12dcc770476fc872df479439ad4ad7773b10177a2e8446370812e6af54d The package dewanto-gudeg1-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51841 Malicious code in fajar-tek47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb55420f327a0bd2483a945a785c750a438dc7f2470f15139396db638ef2ed0 The package fajar-tek47-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

EUVD-2025-6613

Malicious code in bioql PyPI...

EUVD-2023-3077

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-33996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have...

The Scratch Channel 输入验证错误漏洞

The Scratch Channel is a project site of The Scratch Channel open source. An input validation error vulnerability exists in The Scratch Channel versions 1 and 1.1, which stems from insufficient validation of article publishing endpoint permissions, and could lead to unauthorized publishing of...