Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407: Missing Authorization

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...

Malicious code in fajar-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125fcb247b9e7a4d01d6747fbc334d1505c9ef5c1ad840ca90c0471b9675ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-soto20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28949e01b381ba41d8f229ea329e081b22d5978c1c0d96c6644528446a44ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-soto84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156dce36ac52de3ebb4aa6b85340d99e88f5c69d36d8d51bc89841bd1b986a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37994dabbaf3527d00ada00989b8214122b9f8ee1d35a781b19c04c886a9fd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9130f1667cb960cf1dc9c089ce0d794933886c54ab7e45c5cc0ec475b317a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135752 Malicious code in nana-ronde31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8a3876dd947429f599131f995f88e5a7f3aa637225a48e9324971181880b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136340 Malicious code in putra-saguer5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678062289d590fbd9b11a5118677b5ea8711598c531d3cb8d11049d671de5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136345 Malicious code in putra-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66a088ee565973d29ff89fc318849875deb5e86d083d22f1d73329712f81dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135484 Malicious code in marginal_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012a44e1762a7fb4d0937e2832db8e36c7e56c7bfa742f0376cee090dad7f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132141 Malicious code in attractive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478874c1b546eb9c4154f8aba994b4737ad4d74469b985e38bdeb4f59362f4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133986 Malicious code in hadi-telur74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c154eb9e5a8fb8f8202a987c84b7e4904e45e5e5bd6d90dc7924471e9f26fede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135964 Malicious code in ocha-semur15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23ccf298994b6a9c0d4abc676bbefa06acd5c1e03c489b905dde5e9a74df5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137197 Malicious code in tania-ikan7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450f20d17084bc27d1d31cd9351542d221e74211c04a6dbab17844b799bd78b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137813 Malicious code in vina-gulai69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b95ba7f7db625ed1c37549d24a9cf09d8c44b8529273635754e389e95160e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137304 Malicious code in tiara-nasiuduk2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b209f5518fe1e213af610f38e1b5e896f9b1dbc87e39820e641b872f48af58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132474 Malicious code in cindy-gulai42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ada8c24dcce20c18216d290a12938a56806212aadc93f191e90583ff127e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133793 Malicious code in gita-kentang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8556c003e0ab8ee9b11c94ffefc4f80da9c4539836dd1225ad179235ddde188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...