CVE-2026-55675

The Salty documentation repository contains a vulnerability where a fork pull request can execute arbitrary code in a privileged base-repository workflow. Specifically, the .github/workflows/trigger-pr-build.yml file records an untrusted fork commit in an artifact, which the .github/workflows/bui...

Malicious code in salty_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f8b6be7dd286119d4a8f96e6f907b671653e6e973937309091d087f0264f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45905bf0c2192d27d0dfeb93b26f692a996b9f6d2ede4a5094e881facf07fda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136816 Malicious code in salty_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45905bf0c2192d27d0dfeb93b26f692a996b9f6d2ede4a5094e881facf07fda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102392

Malicious code in saltypinnipedz3n npm...

EUVD-2025-88945

Malicious code in saltymeadowlarkz3n npm...

EUVD-2025-88944

Malicious code in saltyscallopz3n npm...

EUVD-2025-75750

Malicious code in saltysloth-silentdev npm...

Malicious code in salty_tarsier-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e2a72b3e55533acec13dfe16592140ba6d9bfda5737b701521e3684f7a1816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78373

Malicious code in saltybearz3n npm...

EUVD-2025-73852

Malicious code in saltyboobyz3n npm...

EUVD-2025-73851

Malicious code in saltysharkz3n npm...

MAL-2025-96439 Malicious code in salty_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b22d89deb756660db049c472a415e3f7c29d7a1ff352037f4c4b0243e948229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66918

Malicious code in saltyfoxz3n npm...

Malicious code in salty-lavender-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4cb694f39cb777ee074dd89404ac213a6420db8e855eeb033922d65f20040e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52191

Malicious code in salty-fuchsia-marten npm...

EUVD-2025-52190

Malicious code in salty-harlequin-slug npm...

EUVD-2025-52189

Malicious code in salty-lavender-amphibian npm...

EUVD-2025-52188

Malicious code in salty-peach-thrush npm...

Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...