Malicious code in nokire-abimanyu12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1aaf91367a6b1f4cd9a5f256dc33a9a1a971a642491c872e9d169d78302c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamli-luola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a21f9b1cc6c4d32a9475fd9f1b47d0d13805938b0390b752a04c71136073b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbccae8830fe6a61f2d9f14553ef08b1d1b8378ce300877812d85a9fd2b7598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151965 Malicious code in aibopuna-mobile-arnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637eaabd9dcfc7900177b7f477a8e56800637f34d8431db3cec20f6d0ef730f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166395 Malicious code in sunderan-udilsisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e7287a2024bf075557e601365e7a39974e55e05d9d21bc1932700e9d8782f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169281 Malicious code in trevora-cir82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c2b41df39ae17e00a34b9ad057cc496f5a91abfe41274415645caf89cfdd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165330 Malicious code in sabua-muhay-nyabutua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69b4d5a905c7e34e312daba9e21571080542c9e0532fd2af1679561461ecefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158694 Malicious code in lookingan-namakita79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8f601a16cb4600da21c9275d7551369286957580ca1e449fc928947d943336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155902 Malicious code in ican-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c62fa017255b149c6fa4968a34f162037a2fe67247e2b1c12169cf832cc7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169682 Malicious code in ucok-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc88738077efc20be4c20149e0be9a52e31d74349c8ac93765044ce3533267b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143220 Malicious code in heka-umbra-typeorm-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2821646ca02deaac2a323569de93daee25d1a4466d7bd2c820366fce5860099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140195 Malicious code in build-unuk-uglify-js-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b7151233cdb9ba8fac2fc89070d32d847bc28c6e628851f6fa934f6b3ebefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145728 Malicious code in oauth-eclipse-rest-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9d7ca9340d6fb8b3f88a34d84bbbbcee43c40fe37d53bf84d90cd34b2a31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-antares-gravity-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ca8e4c5a3840f4129af13db2501cde2458849cb22d07cd346ae8a5cf7067a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-mocha-atlas-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd2746d873666f4365b41ed0fc9271d71a3480d6f86e815799cf9954bfa49b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-quasar-transport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143899 Malicious code in jekyll-castor-dependencies-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c96e67c6ad324876e8e775f06dd8ca2818411b3b50df8dd9368f502dfce5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141754 Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...