MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrochemistry-aldebaran-update-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f153e8f9ce57b26ed2021c54f7589a72b6eb21094b47c5a9c67c165ed436892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187817 Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

HP Integrated Lights-Out Information Disclosure (CVE-2020-7202)

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information. This plugin only works with Tenable.ot. Please visit...

Malicious code in mitali-dan-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418f93d91ee5bd14ee4e9a922937c05928bf21ffe4d2a9530bf34d76d1178e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f8eee7671cea3ae583f68f691300257e827b32f51cf5067296eaedc7c84104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082ff2d66979d0f2b073bc8f2e9812248c01496b1ed3db0a70c2dfec37468b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonlki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ddfd0424592c551ddab661021906d0c6ef233f8da1fe03e4c607f6909f7558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-daki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ef53fcaa5c36ceedd974ca0a1bca0a44bd05eadf38141b50e4407845987b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavugagijim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c197a012ee127a2adeaf0793455d0159513cd2359741e1b9618feb7da3fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3da3df8ce72b93da4e21e5aca1c77195c5b2fe656501765d1cb6b8b8e28e63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b065cec2a5b1113e9792ae85cb0380920eb18f8fab57ba6aecd45c20312d200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuygfjbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410aace70afc8fcae28b8b90521b82da544d145ffc4585de74bb02ede18352cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10521ebbc7546da459671f9ffd1c8a10b821eb20ff49cdd51e8ed5d36ea5ba88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oy-gioafissioasloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188ac92a663cff3c98b059afd975da1fe2419e2516bf131d65e04c2c39b3e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afff5282c4994862959982ed0c13bca1d23cf25d10d80927dd37f392e860c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-difg-diw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed4d481fffc80c188a418b5db1931db1f5b0fd447bd01c0fcc08389016cc1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdcc3aa397b763ffe7b5608824546163ab036cfa64d4bb688b53777f8bc2522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...