MAL-2025-141829 Malicious code in dynamo-magellan-standard-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0e6537f0509af7748578bf409c68509f2a78dd654ab1e5524a808f98d675ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139160 Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bfca3c0b986f8645aa05a7b3c55690616e567c70cb435bed6ed775095efd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120331 Malicious code in gita-oblok89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9efb92ef6cb48c189061b1d9ec37d99a21fd94df719876a23cf1b30916e61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47286

Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on i...

Malicious code in iwan-rawon83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede5d939c9d487ae609e8d29ff30d7ae50af057048a0a99ae11d210e729226f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114981 Malicious code in jaja-martabak52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb00ac185974d35a468126bd330d6a235d481e9b998f12a16b54e3bd7727e384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114358 Malicious code in golden_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174a0e9a600bf73e87b54f3fb8f22ab22c326f232830cb310870fe632c9fb129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113084 Malicious code in cindy-mangut18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326de83285544633cf37d6398f16777dd99d889cb0c8e2a83a3a64035094dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful_wildebeest_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ffccf79d313b79b31ca5307cc0db590b7028bc11431ab09a839f4558b75fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99354 Malicious code in alleged_deer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b675f0d577b90beab1b910591f5a817d0757950686f859b674d301cf52e58a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-mieayam61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd9082b2b7a534e691045681dd499c0f42deb93798d8894051b8bc8750d1e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105231 Malicious code in lisa-menjes17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac9e746bc9888a6f8a84486bef7feefe0c9fce4f77f1aa17cf490331f95078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f634b91db7904b02c1d1061cca5e06b28f507c29d3d03292f9b7e931978e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72842 Malicious code in fadhil-lepet8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096041eb79c579b14c9fc634f0708f157db4a454be68cd9faadf1852c899c032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72442 Malicious code in dewanto-kupang17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d435ba635d9304a81ec793099c04fcbd18a79aea01304af2e6f1ce58c55b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67211 Malicious code in classical-teal-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9fec4a03289680e8b011f164e3a1dbb3ebff93723462a2f85451814aa092a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sasag49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfac1e64e1de960fb6108a90b0b1332021c8268f8277d5b0999cc2387284632d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kue41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909a5b8085afdcab6d104d3696ecb7ff3d63e2234686478c487441db8ffa90f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...