MAL-2025-60086 Malicious code in charming_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a0b595d59372579273d1f5cd001a7c543c72d284bab54234dbecc4af5543b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-donat2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2bf761c738bfe274e640b11e895b2fbb348ea5e096d8bbfb08976ec805bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-dodol87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0f0e2a21ba97adc14e75d36d47bf407e7fe099ea4355c63b33fa95a6591e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-sambalado58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf7b2be4a15a4b6948133cfa4bea67d2b69f73324ac640dd84490a94bfcdea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tempe93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff6a8e7a92b0d0114ca2b72661f0f076122e74285f5367c56c564918077375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55694 Malicious code in compact_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e6e9a22b68ad6d1b9a32b4c40bbd673488222a52fda1b7566bc1c66dcc102c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44049

In JetBrains YouTrack before 2025.3.104432 missing VCS URL validation allowed delegation to unauthorized repositories from the Junie widget...

RUSTSEC-2025-0116 tandem_garble_interop is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

tandem_garble_interop is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

Malicious code in okta-naget47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a91a1b5bbcc8605d53f36c4fafd800818742d5ece869abfb0cae9b829d52535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kolak11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce63c2c6980d360c3d0fa660f570b75401a28aacc41d1e1f099d4951aa44cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-wajit66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe3b50e1152a196a06b06451a72de9acf8593f23e72b018c0b18d11c9da87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53597 Malicious code in ocha-kepok93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415e094b1c6c2774199a6bae9333718029d8b72e11471822966b737e1ed37cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketoprak72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f1b27c4d024b8b75f46b616364144b4e629b5ba6072b71aadf9340eb48e6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53572 Malicious code in nurul-sego2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c35aad6ae9c2cb78bb1f24a02b079e0c07d085e289a2cebfc4b0e7f6e7836a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b015de9c0fa1d4ff8d1f89a2ebfa9c34237da8a8d2a5c2adcb36e5c7e4b5d The package dono-gorengan92-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in arif-kue51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c043775d225224a638d6aa61119d85eb7c8a6526865a5ece9d0dc7eda19e The package arif-kue51-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50411 Malicious code in fauzi-donat87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a594b86af2104fdf24d14d1ce3a7cab1ecb24545860ebc9edde258dc25538ba The package fauzi-donat87-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in erwin-asinan76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fee842831b90369247c6e083f49be0a7856124461220c78334b2f7d2828c90 The package erwin-asinan76-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in bella-nasicampur67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530e615606c3fac9b878efa9fce5921264bd3bf350baad231848e85ecf5c1aa3 The package bella-nasicampur67-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...