MAL-2025-114305 Malicious code in gita-menjes68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57598ee5adaa4a954e9a31fd91bf30f1ded69982b4c977117ef9472fba96258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116038 Malicious code in nina-pecel35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8eb325c12da7d5b5ce0631e43e763a6ec881efa58977ef40f3b4f9881557df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112896 Malicious code in bewildered_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40e27f172e0cf9692ee9f182db990dced6da3d29dcff25a5c9308f811729cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117175 Malicious code in sore_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7472ddf67df2bedb60205200dcadfe2d9a883c31c92e27690e5146c44274dfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112759 Malicious code in awful_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d16c3af792d24677873c7147dbd6acc1eb8ce0569cc5bf29e8b72e2accdd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112832 Malicious code in bayu-ongol-ongol63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40242537d8fa7c93de508b36739207ae357f70d990984ec94d073a9bdd7f3f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117406 Malicious code in tiara-buburayam100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a08ff287548c31d999177751f1772a2200e205e458c6357efa0dc3de4a820ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113283 Malicious code in determined_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff78b4d9ace162e61b633517689e3bd76f1fc8965c8f91091a9e4daa0aaf906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113305 Malicious code in dewanto-gorengan22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3b58d902fa245126438d4513370b2ea5e4b5016d61a4769a4e42668eab76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115000 Malicious code in jaja-tempe79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7ee817125a276a4cc8a9ca131784049e822b285efe6c83291caee2bf9b5d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114492 Malicious code in hadianto-rojak26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390a11d97922fe8e5a06525b76e41f8d4d2683999a90c8b201b8d5e3e381ea55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114816 Malicious code in insufficient_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a433ecc7d8a6798cd48724ca7a8615426c482de3fea6ecf8c482983c7c259b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tempe27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144b066495bdca88f18745a0e80a1e7d57ca1214a66f469733fd1232280c53db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0c9ac4f07d35551166aeffc84ac10f28d342b181ff2e3506ff85a68ebfe12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112075 Malicious code in magnetic_skink_azure-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dac7d52f4e7c2d3e237892f091f2b6f8c47768d6250eb7516a0ef36c530885d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111679 Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112061 Malicious code in liberal_takin_indigo-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_snake_brown-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323ed24d23b218d3f0e311d99dc4dbfbd4a0d64bbe6f7c1866033e0b06aabe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...