Malicious code in putri-toge100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76df6f6c4fb161e34408cb8be6b6cffa3d02de58d719fc27ebec3970bf0efe2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71896 Malicious code in agus-rawon97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6a7f2fae19d3a21e75a6e057edc0f274e6c5945f8ae1388e74af92c78fb019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73379 Malicious code in hendra-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887df8d2e4333ef2249dafe09d3f37ed72aaef890796a38f1ba9d63bb0d4999a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76543 Malicious code in zain-tahu29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26acc8aa275eb2fd16c88a92c2b92bd55cb7cd7ff48495724e7a895ea8b050e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-miemee6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7072609e98b2db5bddcc8a5a9ca31c1561e050c965a3adaa7b9ed1fef383980b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67846 Malicious code in double-coffee-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6106092bfcf2988c977a1b05610794954bc4d986fb9a37b350a9d3953a6d084a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65188 Malicious code in rudi-lapis66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eaefd9bc9d9e5c346648ec7f75f04f85e986052096c62995f9df0b97fef372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mieayam63-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc6954c6638cef69669217e4b80e368a7e24199135c3ba3793e1de7a7de5a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-klanting54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3160f6cd07059d082b25f0896ea8ff190d6ed07d06ff5ccf3d334ec255047374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gepuk34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b45fa239a9da1306204429c94cb63e70b4b2ba0009e36b278c0a5e53acc754a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59571 Malicious code in xaver-rendang91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945bfc0a3d0a577547255ae040846affc0f0d155389d81d95227522f08dba1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2f4d3e04db45db10bc49588c09d735874859f09a801280b8b6d6308e99e926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54788 Malicious code in sari-gaplek93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba06a2c395e8d180eff7bbd44ae1cbe85d779946fdcaf467a43fde1c31855ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-sate70-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cd89f88c631e4c5f1116845d63bdd568099cddd1b452048a74527ff0773554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52489 Malicious code in tuti-klentik7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb7261a6bf959b6b1ce95983ae88404a2ece42deb94a4e820db185384b3df04 The package tuti-klentik7-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align (formerly AgileCraft) stems from deficiencies in the authorization process, allowing unauthorized users to gain access to protected information.

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process during the execution of the “Generate Team Sprints” action. Exploiting this vulnerability could...

Malicious Package

Overview cooler-loans-api-generate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in cooler-loans-api-generate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14591c09547262270253b5ec14b726249679f72985f6e450ba0cf5198ee216af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35840

Malicious code in cooler-loans-api-generate npm...

Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...