Malicious code in lost_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56abe4159a2fd04588990b79fc04a17c238814c0e6a301ca1dcf66e6db000899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fef6d3a8f01380f642caebb6bbaf41c17e0f631a72640ed3cafe0ccff2b57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1c10dc7070119eb8feb08d174527c157ef63f835e9f36ada146d97ae0e6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b20de3589448feeef3812a44d102579c272e5de560d9a3ed88062f3d075e569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8998

CVE-2025-8998 affects Axis OS (edge devices) and is triggered by uploading files with a specific name into a temporary directory. The underlying effect is process crashes, reducing availability, and exploitation requires authentication with an operator- or administrator-privileged service account...

Malicious code in then_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898899de8a97c7f4013c0dbd77fbf68993d5ed3f3bc3a43bb68b4ce480bfddc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3e50915928355da5fa448dee604568fb7288dfea6357d51854b3374191712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leonard-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb713cd309b4b195cfafa00ae65a902bdd6bd675acf42926670488fac317d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a768d8a69f3128bb33de1757a26c2b6bf13bd56419a89e300131d257a948439b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100144 Malicious code in buckley-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f8e3630214a2f60b867478a5eaf2cff0534773e8d1ddfdbdd8ee64d8780b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101095 Malicious code in crosby-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d946aac8706453544f58bd4b56ec2be968a97675e585090590614a7eb42de158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106996 Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100750 Malicious code in compatible_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f334c993295638990261ce9a71b25caeec1bbad780b9cfe0873688978a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100596 Malicious code in clever_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc546d16d5b81dfe5b5e25aee56a0786b30fdd9821813dae59d51207da0bc114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105631 Malicious code in marvellous_cricket_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afeceb06302de5d052a81d719587b8fc4d88615150b430be5d9a68a2fd7cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8e4a528841a516857d323c270bc1c2fbe998f3e1c4d28d85abe3ec87b25b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ancient_wren_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9308b57c0c8c584e483a21f886bae3384836facdf7a544919d84ad5b2ce0daac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100649 Malicious code in cold_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcd86c7369ae26f37755d23d108d2b77fff4bbd055e165cc1a36032a5559d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109235 Malicious code in subsequent_beetle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84710acaff4fcdbd02b85f1f39c3708b7068652bf8549f7b941bf58a5a1ca8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100958 Malicious code in controversial_jellyfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824e7e94b3217f3d47eb3bf102948d7c56e67e5f93f4948c022126818060d49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...