MAL-2025-155096 Malicious code in fisdnish-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5002cf872d174e10555b978319bea9ce416797f37e8cc11f60440b087a5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155352 Malicious code in griem-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea4bd936dafa0db8606c5299ea81215d1a129c4cb3e90bc82c3276bf4525882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163990 Malicious code in parwo-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfa74fbd02dcfa932d2960b5d35f7c5328b7b5472a96906a2802a9e35f5b6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169927 Malicious code in uinsu-losit-dulybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e4773277ffd4e1100358746fcb1262512f944f1da7201793cafe84a33dcda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156845 Malicious code in iqbal-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8397f26692559096b250ddea47fd42b7fefc3da132828823ae99b140a340960f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160187 Malicious code in masioaluan-ofa-bato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f31d84de64b21d16875add5255b091957d61c05d8bf7c81f8380b78574ade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166133 Malicious code in suharta-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1778ee3a3c45c053e1492c5aace52aa3a7a39734934b07023304bad94bc1b721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158987 Malicious code in madan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d86d1424f01d04841efdc5ffe6bb3f2e926d7b397725fd9ec4f4511957b49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168814 Malicious code in tear-hfsips-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728cdcf8dfca70dede44131bd877317ed897821abcd3ceb70ccc62faf3a02faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153524 Malicious code in avomainah-fragoias-ofatafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e3fc6c42cd7af2a0dc26e1869edd5ae6718d2f411d830dacdc01a3917ea3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168689 Malicious code in tealove-reborn15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539992228c4da68b4159e4bc0bdf18ae9cf57ffe5c58468e2564ec982600732e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168817 Malicious code in tear-hzios-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ca8cf4b55e516d21ffe4ff05e28097e6c5445ea8399c5ff4fc343ff0e949e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150717 Malicious code in @miptaa02/iasdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9f221a6dfc993f3e03191df95f7deda3f2923687043d853a6b96d3693d0fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153884 Malicious code in bitha-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3ea2953344622b71797141df795d669aadf17445e64f93ecce9701d21ecd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8998

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...