MAL-2025-123334 Malicious code in solid_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6aa30a651900f2b81921a90456ebcce2f0cd81a10037f5a381e32edf91e69ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-ongol-ongol86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317af00a26def6086277d1d0242359313dfb35e9b9dba032ac0f301e0d6a7f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-getuk73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52f955a178f7302328222cba776ff1c90798edb45a81b0a6ae069bc215fd976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118761 Malicious code in arif-donat70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b787cc4ac843dcb7dee202ba956463e179d55d43d9b3a6e8ee3be86331c2e51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Description of the security update for SharePoint Server Subscription Edition: November 11, 2025 (KB5002800)

None None...

Malicious code in tense_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7952038ca96f0a3ce78f1e2406ce60785c751afca9b7c77a3e7b7f968c033c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad99086d9c53d812283eb861e31e7458325ebcfa08a0910ca32cda62b72d30fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-rojak50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329d471b7e594b5c04ab4d03ba3f1997ab5b7f2d318b21cf5025838507cabfd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386ea68648d7ebce4835d6f54a829872f475e8fb5d09e7efc119cef75ba0240f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-moci11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e10fe88b90129a7a507357860d826352cd7f6205eaa4b961a0aa77443310b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-menjes2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1340658128435b6156aba8fb168367644879b0d1b42c2528ad06eebad5172b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114738 Malicious code in inappropriate_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2894484bfb7468ef269500037ee873e5a6554a01a5c3a492ce3f5ab3557f118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ceafa0a2dadbbbb59d8c3e798464563242b3f11ef500cb05df24a34575005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-enting60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb3317a0d59cfd50d2007d8bae0135f5945e532b0887054b6daf5e085a75955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tapai23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5fdf6333fbb03fcb59a41699f677c76d69cb62e81edab433f661151b1d9dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90743126dbd986345a09443274289b0705177ad7a081d27edc203a42c2881da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce1cfee8620f72c0f42f8f0f2839c1447f7abf211f811982f8dc89e267f088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115598 Malicious code in lutfi-kue67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408a738a6f40b1d4afa01105ebfa49fb1772590ac0a6efb8b8c52e3855a6ed7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115683 Malicious code in mahesa-serimuka47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619e1a00bf6567c6494caf488e9ebde8edd4a63d8ea85d83f5fec19f495fd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-keraktelor91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7373caf1ee2117f85e0d146ad2d1e7489f6cdceb1e07e0da279c25c4046156e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...