Malicious code in makanabi-aibba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2eb1ae3f5c2c67911542bfe634a0a8c7828e6ff01d08c9189b296212a201b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239bb692b4808672babb34c787ed57148d562d87f05e5e1695a745a3263e36bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163526 Malicious code in nokire-zabuza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37545e99cf1c7e88ad6a1ad7671d516ee52c1874ab3ac55f66d01c9bdf152f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154170 Malicious code in dajouka-faa-sa6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96d800219acc7d967b91f4f12ce75c235d6c6ca678aca76b840f16d559c73c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151965 Malicious code in aibopuna-mobile-arnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637eaabd9dcfc7900177b7f477a8e56800637f34d8431db3cec20f6d0ef730f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169464 Malicious code in uafaru-tiut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e860b3df0cf13d9e6c80f596f4719cdeac9b5d1e3a176582746e47f6fec73749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155902 Malicious code in ican-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c62fa017255b149c6fa4968a34f162037a2fe67247e2b1c12169cf832cc7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57972a37eec9415c9942b2c4971629cede47587efa7bfc588527334caa3d632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-tauauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825599cd5896d80274a9f312ba2489e5ef04252581f2a8e8cee5eb056dd019c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-hugo-promise-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a25079b613d6030c816cc270a257bdc5bb2c7b5b0b294acc68937fb741bd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-release-it-iota-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef678b480ea8357c3403bc92974a35f3d3162eb978c30eada96539552e2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...