MAL-2025-139078 Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40763

creationtimestamp| type| source ---|---|--- 2025-11-11 23:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fdpo2t2g2w 2025-11-12 00:36:28+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5ffso2glet2 2025-11-13 11:00:00+00:00| seen|...

Malicious code in amused_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59989343d20b0cce5efd686706a4c03867118ef74fbc71a1d1b39537cc43aacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-jengkol33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6380c833b62fc3a40536e474db082f4e66f245675ebc5bc5163507f35911260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f9e7d978e9550b98e5ac5d9918a8331b91d22c71b732fcda4d2b5ac6b9961c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6c0e45e6f0c963af8d38af7807e79f74b4a693754a0b1d6cf5870eb79d36de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fefe4b686902b2ad936bda67de29bc08276d7fd53e95506d19d6cbf35faf2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-klentik16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81a4455b8b9a9322d6c82e6d8d480c355708a35b2f7b0525a41a0374fc44045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e2670d66829fd30de538dcafe2055b0941fa29169950f27b1fdd65dda0f2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sate44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7487e24e17ea028d0f0e4d4c746aa53a329ac2eecce6ec282b72f54abf3773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-soto37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a92bfb247c6c26dd52035bc2ca4fc1bc40c05476436ac5ca55b41848ef407fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2836159379e541cc29c1d66cdba84eff68bca7dc2c356f190f463c83fbab1f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-botok20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f636958dea207f96613d2abd453f3d34307f6ef5ce149547300c77aa8e2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a0c5466f703edf2e51094b738e19fff0609a117b2603eff6c808bca34bbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-tongseng52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610c95f75afe2e6a5f85201cc337c0d6444b6b3b0042752a6af6814bbae9024d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gepuk59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbbdc7e24dcc454b886801e60e1fdecc073ab5b7a15139c7245cb714da805fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b12c4009e9d8d7d8221b6fd5caa88ac8ed366bb06406e54dd2fbb1d2da5e2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-empal68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47220c5c333215606ce2e9f3ad2d2f795d5ff2cf0927dff6bda0d206ed122541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-pecel26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e473543209304c3b8b657ca0e7763e80535f60730f26739607348aa614cebf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655403f507ad1ab0be80108e9bfc1a7d67584c7b92d515d83c262bd7775244dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...