MAL-2025-73184 Malicious code in gita-naget76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42663d7c8e9fb4688f17026caa5f4df610bdf3157a4de6399b5e2e12390c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75534 Malicious code in surya-menjes63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd63443200f4de577278614df6d0a7300b4b36d803607fe6b659fb91bbbbc056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a320351588676a7c196e008492aa20f3bfbd720dde9f24cf7e926272181cb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-green-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7d76f2a7194ec968048ce9d89e5182e8bd1e37ef1505ea1dfd35639ed22f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-lavender-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd93ee8c8afa4a90c3103cc66199fc287ceac743f48f2023f3456b126877a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-indigo-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f277c7ac6c98d18136673501a714f7bac4d7ba4870864df42f90024096b1c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71496 Malicious code in voiceless-aquamarine-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8146a25f15975f91067ead3eaa7be6fd2b1cb7a5b9a168db26e17e6e395a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67243 Malicious code in cloudy-maroon-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04f9771977b6349dcd3db5cbbee4fd610db7728c8884f62f58da041b940165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889a8a9ffa8c79f253223d9425ace4a01ad172023f9fcd9b06e52bbdc7516491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62956 Malicious code in fauzi-klanting95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b646f6ae7dd7850c26f8d4951778ea148eab745f46d8742a45c7ebc39c9613f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63224 Malicious code in hadi-kepok66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a328acaad5e2f7c9f1309f352c39e6521e6165d3fcdadfd2dc85e4eac72e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65181 Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63267 Malicious code in hadianto-kembang70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc691ca9220f567add7a9e3aa34f9f92ce6d95c7c434078755af0f0a5df4af50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62433 Malicious code in determined_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69e18fd408c5283225366724482711948653c1b85face039baa9d461ddba96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59512: Improper Access Control

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...