MAL-2025-116187 Malicious code in ogi-miebogor15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d32f0bf8e6722fa955c730c5d6613b34e3fa372eb3064af51bb682b882182b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112862 Malicious code in bella-gaplek20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92fac5b2cbbcf9f01032a6a05d74b6abcc96f3dacd8a25f194f4db93e8fa8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118328 Malicious code in yuni-kripik3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80484cb6e750cbbdfe8fe016fbbb724e01b4b15cd52557ca124950118185b574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117562 Malicious code in tuti-soto46-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c1645bd7a7eba5ecf1fdb23a44d5ffe73d31df3412053a255dd259cc6f8297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113087 Malicious code in cindy-moci66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7901e2e85f55e38b4cbd3c624d77647259f20191a603ba1a1d974ed9b5db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118037 Malicious code in wawan-taiwan59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba7a33b7f6cf49eff7292fa1fd9a0236e61325baeba6ebbe1c2bab60e8c83f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114413 Malicious code in hadi-klipo87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4abf782dea7df2a429820e870335150b5fed525ddca13aa776e4e6870c61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118169 Malicious code in xaver-taiwan81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4402ca89b01460ef788cec3239aef58c268f65d3de93da9a47c1d0d2f399ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95417c94d5f7b4b62065a8bd582a5945ccbe486575be3c38f96a7028b50ad88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lepet73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32331fbc484eb2ae788ca2512388bc790028c1eadaf6e3cda6abb095ad690113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eaf9986da41ed34ddb44c204a7b90caba62856c48f0c49b4cc8f1394957a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rangginang56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a6ebbb141ad04bdc3b83943bb34e97638c8e5cccc85481fb0e00aba172d445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4c9ebcc1a99b43305593edd1ac4824885cd545441647facbfbf627a6b01a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-pisang96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68cdb1cc809acdd71bfba7a01361697bee6237164c8cdb486bb82ed8ed4cf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112075 Malicious code in magnetic_skink_azure-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dac7d52f4e7c2d3e237892f091f2b6f8c47768d6250eb7516a0ef36c530885d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111679 Malicious code in available_silverfish_rose-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e703e9df46187f71eef472625c1cf9563ccf8f461536efc46ad931285fb9a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112061 Malicious code in liberal_takin_indigo-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_snake_brown-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323ed24d23b218d3f0e311d99dc4dbfbd4a0d64bbe6f7c1866033e0b06aabe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...