CVE-2025-13102

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186199 Malicious code in cold-hot-beta-log-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a7f8a4e041fa30770c77c28ed0ed77e8a0b512d546aac9d12dff4a25c02072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185735 Malicious code in bad-kappa-spy-fire-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd357cac25b9b3eb95f0ee24e2f44d4765d6fcd28cc491590ab1b7e043b31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187147 Malicious code in genomics-outercore-mongoose-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599af6ad25dd61bdaaada8e8915ddc13209f52f00cd009dee659067e46b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b7cc53acbbf9353d58fe43267fa8d26ab2870a7144012364a074a478f1a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc0a4a32082b9bbcd779fe505d685506c57839244bb683c4c60c0943622525b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iobloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8337c3a5b1b76082c9782b6a6ecbadcdfe392e6b31b0c63190a21b21445a780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmin-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291519c98b9c19daf53c25d08409e3a3f43fc53fe0cb8f05c6a59624d6d9b1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176538 Malicious code in nokire-tanjiro49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63247c0a96e0f78d55d9031e151095838048a99c6ca6919382269115317937aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179248 Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174940 Malicious code in inul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa702424ed65d4a2d1c17bd0363e9cadea29b2a30fa42ea1d8edfbcfc0bf0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aoifeoconnor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5cdc1742a7b05d3f5c85c2c11702bb65e214ade32e38c7819f112312b17c5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b34bef72c22ed8cadbb1651ec2040ce150303c9211514ecc4687b801f697c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3120e7fba89c715c3f12d3f9e10ac0ba9a4fbb41a8723dfe8864bc5cbfc063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335560da350540d5efe005c43fc28c850bf22742df0878d947a56d57c6a271d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3852ef7eb0e260ff4b387e48847d0954bc9b92496c31d3fa9a26fe3c66728eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b2c657cb1f4a0b279807bbef0428e83e21534667d7ac4d3bd763ee15722f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...