MAL-2025-159577 Malicious code in mand-nof-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d875e4bdefa271a0ced355b29ab3994069a506bb25e5befcac62a4a7f41d9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165401 Malicious code in sabua-muuyau-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13513e7a224c8569dcd66bc246412586a421fa88c2f1df1292615de7916f848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155588 Malicious code in hafiz-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7bf2b7c0516cc3b1532dee13f94992f6d905b83b2bd153b1e2b9076e16e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163080 Malicious code in nokire-namiresan29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05aa026772b74366ca700e98a23862351eb4eff46db2a578bd12ef262cb9b634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153005 Malicious code in aviaah-afgaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453f77ca7ac6732aeb1c2215e1204a31de4db46b4b398faa1a8fd3244b0b0137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155995 Malicious code in icha-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53eeb3541bbe01e69960ae41bd263b3387cdf407a945b51ac80007216f1cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151898 Malicious code in aiboa-molpe-asiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e49abdff2f019b8abe3e40b3519e313db041db000d5d9fcbe9ffab060b8479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151409 Malicious code in abina-amugyuiami-ammagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c59bb5bc25310698ebf9ce6bfbfca7cc5d7bbdf94cf26f7019890db93d9f2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is vulnerable to SMTP injection due to Jakarta Mail (CVE-2025-7962)

Summary A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

Malicious code in prettier-plugin-markdown-nebula-indus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6492a83247e49f72e6921cfc3118e1d644657d0ff4c5ddedafb09ef6265249ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-sagitta-gravity-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-carpo-enceladus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9631a095d3153517d02bcfb2904010b8de2609252d7d52ac4ae5d8876779a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140029 Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-flare-less-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25df43a3792a824048585a418662fad658d8e9fdd44416ea8f86aca06512410f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...