MAL-2025-122039 Malicious code in nana-rujak5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b46a946a9db59572d0ed779f138e9a4f0baf191fd865237bfd79c53daeaaeb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124102 Malicious code in vina-martabak34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e8581fc1160216e899d587ec9173efde5cca1527c8e3001d3e386a7024fa0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

Malicious code in raspy_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7be66ef7b0ac0288ce5484fa264a5f94fe00e19692ac822ddded01dfc1d46eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lupis70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acc8b75bdab4e53166c2129571ec507008583f321ca0493c0287e4dafe86309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bea9ca11c5d1db830031d1127c9f322ef96b9c3c30bd4d9bb567a0fcb968686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-menjes65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc7e1ea3fbcb9e8be7dfc6cd334c8b520df20439a22b4ff464ed6b3dc425595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-semur81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1aafff98cbd856f8e0ab35736de98b4e3d1999edcfd21f87e0753a38d46ff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-dodol24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2460a4a1d946d5ee5ab939bb2461eae0019244099e7da34012b35d586e57a257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcbf13431c6adbacb748edff60a01109ec4d04f3ca37f819d5cd64b162b78b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b927fea76623dd0223962601e7141478b0b0bf16cfcc45a7b5c4615696f5564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ubi49-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00004e0f3051c8ae20a38c8be0a7dd08544c498b2dd670a18ba08b4ecbc3144b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-esdoger72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe26a8b5de91cda88f0d23ed0f152742f7550b7ca2da0cf319b067a7ce68088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116433 Malicious code in present_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2080620396ad73f68c5b97435d25d5016087393fdd5a16acaf227eaacf842395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-peyek42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e67fb5ecdb50341d5c7a1c90a232413506abc2b903e8bd11a284eb559ca91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-gembus55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961608a9c40ba29fae4c63a3be5a43a0410745500ffb17c2aa5ce2f615629370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812faf4ebdb9cd57b4bbc7632c6c551b1f672243d63c5e58ddd75658c674dc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067cdcabbf785d93891f0061da73cd5766ac6ed1cb800a6c0f72c27eed49d2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133ecc78a6909fd67c732198ceb4e651ad8e364e62b168580f178e48205813b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37c295e0aa4df7bdbffed8e42d04a9a8043fdc00a88142f96ea133a828f55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...