MAL-2025-178820 Malicious code in tanuria-safafai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b1c8d3db573ced2f426a7f99988df2772a698ebb204eb2dd66a3b30d0cefce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172246 Malicious code in augis-pom9r-nmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8569be45fc237102132a1b2a9c420e2b3d51c4d26bc10a9cd784b6ba38327f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuylbani-nikubamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6b2c3e995fd3718dfe784d17a3d4aee2aee6228cd96be1165eab590623906b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a614922b86b6aa2c1aa09253d38195bb3a61875b3b6c9e60873e0b54c705297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156702 Malicious code in inufgi-gotumafa-anffafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4d3c950e4e8c247daa713b4de601a8e877f4e330f5e4bc25205bfecd1387d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fd4bf57ddb63d39973e7bac83b03ae5017ee05caf573c126370767eee26187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163705 Malicious code in nudela-aafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404cb1c2c3bd5a66d13e91931ac180faa4d79a80000142b715dac00ec111ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167710 Malicious code in teagood-namakai54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5fd36bedde666e73f1999fc68a0b664832b0ba1ec427013cf942294f9fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167242 Malicious code in teagood-nakama74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84059980ee32c05e401f3db105d493d472793700a2d7ff46bf5a9f4bc238da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-prettier-css-loader-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-yildun-karma-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002463a9ef23a3781a6864d5ad3a340c5c545b7720c5f79a22a9477e198d67d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147942 Malicious code in sirius-config-levels-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda37d8300529894192d4550cbebc8d45b72b09020b658596425e04f458a7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143158 Malicious code in halley-ophiuchus-markdownlint-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607655a9434cf502c2fa60318a5328e80964eb1e771161aa48914888bf2f2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139034 Malicious code in spotty-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235b2d0ae78ab8ad8a86f5f1b00a821d6d7696dfa134f0f972d25217e09c3d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

UBUNTU-CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

Malicious code in molecular_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4be6019ce947a4d607e0a10422e4df8db65d943752b55a9d75165d88ef3785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oblok90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b829043a5167c11e06244b4be6c9e9f7623a79cb727d7013fd030ece2e9423c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...