[SECURITY] Fedora 45 Update: caribou-0.4.21-54.fc45

Caribou is a text entry application that currently manifests itself as a simplified in-place on-screen keyboard...

Malicious code in inherent-emerald-caribou (npm)

Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in identical-copper-caribou (npm)

Source: amazon-inspector d1a1d4c9c2c788afa823fcfb1f702f9b057521e6a8dd52315e8549988fa8969f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dynamic-coral-caribou (npm)

Source: amazon-inspector 898cc20dac207be5f5e597c66540510fd4de37910630900b6c2a9491a94a3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in conscious-amaranth-caribou (npm)

Source: amazon-inspector e8f128f1ef7277856c56237b5dfee8205b40473c8bfea9fcc870472892dd54ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in able-rose-caribou (npm)

Source: amazon-inspector d1ebd51e3086cbbc51dfda41dec31f54bf4ec70ca8ac00eac0f69c0df89d4561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117369

Malicious code in forward-olive-caribou npm...

EUVD-2025-117176

Malicious code in parliamentary-coral-caribou npm...

EUVD-2025-117045

Malicious code in surrounding-olive-caribou npm...

Malicious code in forward-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda4ab6b7f5634651a53d011f38d48135f98262fb93d7c8ca5fa323c1c33905a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620fb7a7233c6336cd59f0e7df4de878e1f7fa088e520d05d44bbaacd13c0911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99313

Malicious code in electricalcaribouz3n npm...

EUVD-2025-101257

Malicious code in undergroundcaribouz3n npm...

EUVD-2025-100393

Malicious code in westerncaribouz3n npm...

EUVD-2025-102093

Malicious code in spottycaribouz3n npm...

EUVD-2025-104074

Malicious code in loosecaribouz3n npm...

EUVD-2025-103730

Malicious code in monetarycaribouz3n npm...

EUVD-2025-95133

Malicious code in selectcaribouz3n npm...

Malicious code in select_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850e3b8a4e5790cc4ce8939e03b53c4b4bcc40769152388a1c581ccd4d989d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...