MAL-2025-158358 Malicious code in lookingan-konami92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def23c205d9e1065844ffcd01dc4511e0bef615327ef692f86381d4573680e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-aramisiia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9552ad86ee336ed8104f4309adedf4331b0c71aff6d910576cafee0a8d3937e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155346 Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153364 Malicious code in avminh-afais-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71df789d004c9c74da90099cf83d321be0c02cabeeea0066edae8cdbac2d3222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156991 Malicious code in jeep-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af298146d70140e2f622921522af2608b8644915739bb18d90241c730b6ea43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156258 Malicious code in ilop-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccd5a77b116cc0c1e120a6aadd103bac823fe25109c30c86a9cff30b1f1da2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165401 Malicious code in sabua-muuyau-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13513e7a224c8569dcd66bc246412586a421fa88c2f1df1292615de7916f848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165457 Malicious code in sabua-muyaig-bfug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a8abcacf7f02f443d3625c2eee85ec41af228d9484b09dfa1155854a3dc626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161442 Malicious code in nabuf-otiganaogaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7efe9390ecc5ad1262a3137b98f037236acd90fab91842c1f28987689caf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164388 Malicious code in polil-akilamu-lunakiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c24fdc5648fda5df0f49b0461438674b8e9603fa706f8b46042ebe358c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151898 Malicious code in aiboa-molpe-asiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e49abdff2f019b8abe3e40b3519e313db041db000d5d9fcbe9ffab060b8479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150302 Malicious code in @mipta1/wasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8626b1084760db2c816db5743506436155f34fa31474b0ecd44dec47ebbc42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufuai-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0a085145cc44bb41a6f9b378ee2d464aa41043d507ddd8e8db5a17422193f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163080 Malicious code in nokire-namiresan29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05aa026772b74366ca700e98a23862351eb4eff46db2a578bd12ef262cb9b634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164239 Malicious code in piluka-kaialbu-iuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2d506e0e4b4b01f073376ad1e142c61305885d07e3fa85da5446cf16778763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158348 Malicious code in lookingan-konami83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0b40bf692b765ca4695d6a545afbfcea7f65bb00ad3a47ac9c160766bd11fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is vulnerable to SMTP injection due to Jakarta Mail (CVE-2025-7962)

Summary A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

Malicious code in prettier-plugin-markdown-nebula-indus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6492a83247e49f72e6921cfc3118e1d644657d0ff4c5ddedafb09ef6265249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-dotenv-kinetic-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ec590f507986f683aab863db75e6bd4c52df9e191f65b55252813aa649ffbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...