MAL-2025-118867 Malicious code in bayu-gulai36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc4a44bc922562a57250c680378c2bb763b4e37db50afe61c91061434612cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

Malicious code in excess_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f09889b002b522f06e6f4847347362cf0abff404cece087191e6f905d53a160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-mendoan32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973dc3e0682fbd35da21ba6aa94d48d1a9af50527f2465dbb05954aa867fe16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tek7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8676469f32e46a0f4ab3db9eef9eb708f0a19aa540d8e5a125c64e9559834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-menjes59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d02aaf70cec77906f2dbe7303ae5dfd4b9256d5bd80bc147cbfcdf698f5640a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-bubur29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad0d50b57ac8b93433392ed9caa509912f04620c818cd0d57f5d3933a010f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasicampur26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68f3dac73c543f9c2f6c550ee444df206139e3a904686bbd364a5fb4d9331c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lupis15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafafd465f3143e4edfbdfb87e5776eb9f1b9ec71a315f82791db03906c25bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c770a152b1a6d3d92f29eede489e423c63b729fd996468ee487a3c17dca58ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ongol-ongol98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41b14c7f46d5d564d1c8a01cf198d84066553b49a7071c750879e84d550a4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a7f114f2bb0672ab0133bbbd297c44b0b4cac2e252003c2090c084db061170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-oncom44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b17e8016168b82349392fa9a25773d50fb9803cccdf4f38881f54fe2d6f1b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d515e15944163a5d6ca38b88f03b7afa31f750ebbe446baa2d70d0b63d322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-bakso11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b75627f6d9502f5c8e29d0129931eee12ac8cf3320f3749fbcc5192f544a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasicampur81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8115b42ac9f409506792e9920f9547b9b1b98b4eca0ef856bd9a41b7242b0ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kue14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe135164fb97b834aeac81fa6cedb64128d874fe849c27167eb76e21a0280c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kripik57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5754b9dae00fd3efdc2813d68306f3970a33944c54ef286fac7e0e9db9139d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4d0d04d1e4450254ede59840e7fe52658f30db60148ff1098f07437d89a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a19464b65539ee1a00c435423330e730029a4fdf39bc54a7100332a6327fd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...