MAL-2025-183997 Malicious code in mitok-doni-olodagivl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40daf3cb74df623df19cafda754a1a92395158b6665fc72992053de3358bf36e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-hykaulagg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baac91dd7e0f3db1d19545a00223bde0808f881da492954b51023d6de129f7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183624 Malicious code in mahnu-nofity-gaomni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f29e1d83085ca512494d9559f31b5b3e577728c2c0f00eea9d11836e47aa3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183000 Malicious code in itale-dci-rfrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8081936317aabb1d804cb6fa6935078fc970eaf224cd64c6896c3563bf751fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64482

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...

MAL-2025-181565 Malicious code in roti9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eadce8cdcf9587f89d13b5c29efe37321115206696aab61a14c8443a09f953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64482 Tuleap missing CSRF protections in the File Release System

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...

Malicious code in teate-thy-sonic-niwij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fcfb6b52f403ab90451fc354dde0061ffee477bdcca9a866faa9cb2b40da23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180054 Malicious code in teate-thy-py-dulna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7776cb937480514dc004cc5ded1a11f860da618eba61b6a83451262aa83e1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180084 Malicious code in teate-thy-py-nimoj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600dc769088c18d8a9dbc829112bdfb61e89cec5b54f908a7d73d5c833d3e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f268cab32e8209105aa29f0b5ae1af0881115137ca24898f9dec8d7c67667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5762ccb3a5ff1dd79564adddd057d8586037b2ce3bd77eb735e3af21a5fc30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniakd-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81c3b6bfa660df32b38f7903cd5a7f1324ab3f0088abeb8575a6228b32a0c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-adagadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5edc2abe734d47cee7767790983214f4b408ddd9ad3800370c3d1a408c158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178979 Malicious code in tearich-good8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cc068d4a0a1b151fab6d3aa9598784abf44e9094b95ac3cdd99824806c28eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-fgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9da5d20e8d31085226a8f9bb4b2186311f2931fb3174ec54227f2ee364f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b560155a786406415f94fedefafd01e00edcdb81ae3c49837732ba46ad724bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173714 Malicious code in butanaih-fafsa-darsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36753def0944dfb734bc51f492e98ebf1e82a815aa6d56fdfc84a4fa31ea0d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-asofui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0437021eac60be7ecf8af1498caf988df421972ad4a6706d516f585349aeb182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...