MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-47842

Name of the Vulnerable Software and Affected Versions D-Link DIR-822K versions 1.00 20250513164613 and 1.1.50 D-Link DWR-M920 versions 1.00 20250513164613 and 1.1.50 Description A buffer overflow issue exists in D-Link DIR-822K and DWR-M920 devices. The issue is due to the manipulation of the...

Malicious code in magnetic_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152f443b01c1e534d2fee36dfd403cbd9dcf849eda62d4d8b32fe46d73c95637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tomat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bf6116f4e63e0fca65943d0ac151091f1d3a9da54ba2b2908e83165e8fb595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133791 Malicious code in gita-kembang37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f94a6390e78a3ec1ca38cdfbf1dc081ca7dff695800c0269f65d5f73b7d0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138181 Malicious code in yanti-bakwan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f2c9712fc5213b5d8c5756529de2c02f4576a7947541194290b8a5892b66b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125495 Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-dradag75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6d34bb20a56ee1c0898b2a04b414bd88c65fd5693239e09dc3c095e79b3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120208 Malicious code in galih-teh99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c50a3cc73fd27585f4d25f6d4c994b310804b7dc54956c51542cde9b7ba7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123140 Malicious code in sari-taiwan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcede57e6be6bde0699bd9d7dfaa16f15431f6f13619cf5fa079ea595507ea28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gorengan21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54806d9c351a181226bae5aa64f65009b6dc1adc92dbf54ddf6c05cdbd00d4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-wajit56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce72248caf8654513c266dd9504cd53be7b5311e921e02a2de3f73219c84683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-nasi33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfbd4f9c061bb1e9d568dce3db004d74890c446c9c8ab3f981cdf992708aafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116118 Malicious code in nurul-wajit57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772af6eb532511e5bf5ece615c7084e95c8b51b2ea8dfac5601cf5fa99da9bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114205 Malicious code in gilang-menjes84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe852e53bbd673a3e41caa5fb42fe200ee35bca3fcedf4295e68df42fb2305bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ketan88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f101118dd1447989ba8a82413b00b163a667bd643c836f3c70befdc9da9c328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116470 Malicious code in prospective_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8184d6210c4e4d2efc51af929d6da4b33ed14e3310c57d18155d1d3174a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...