MAL-2025-117483 Malicious code in tomi-kupat39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e43f27cea86cd00dd3df9e36793fd52f603f2ec04d873085fd4df0b19a8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115700 Malicious code in maman-brongkos5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3d7744d2e41e77bd5c37ebb9e5db2022b4378eb92e447bf291566efe1bf509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118169 Malicious code in xaver-taiwan81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4402ca89b01460ef788cec3239aef58c268f65d3de93da9a47c1d0d2f399ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116304 Malicious code in open_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092370c455169a99a6e0ae8133a420d900b719e73ecc540a2d15695dd4fac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118491 Malicious code in zul-gandul59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb57bda8d29d4107637f37d3518e4638c1a3ea380597dcdccc16594296b2dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118328 Malicious code in yuni-kripik3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80484cb6e750cbbdfe8fe016fbbb724e01b4b15cd52557ca124950118185b574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112955 Malicious code in burning_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f87aca48173348744c71063c88a9b969d30459d7103fa27335d207b491dd08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116755 Malicious code in rifqi-buburayam20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d834eab3aee23c6d9c9194110ecb41642b7c0a82e6b8dbeac4b4b330ddc215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117025 Malicious code in sheer_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7b4ac23e29002be5919eaebf6d28ffad89341cd2d419ea57d2ab5cfafc0e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117656 Malicious code in umi-sate4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d86cc94d477d814db3b59c19fbc43d183d4134510aed83414c3ef840212422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118216 Malicious code in yanti-jus13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8d5726df1d4fa063f82f7819a39250dd55c42e6ab041cbd5b5d2cd07238cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117641 Malicious code in umi-lumpur5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a700cce52f355ff08b266b927a4099ec6011c2d93f63d63cd41e53f89d6c4723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116821 Malicious code in rina-keripik56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9259663399cc9c75bd7b90050b4dda102e03c861cdc578d61fdf73ccb956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113819 Malicious code in fadhil-oblok100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6838f0aa1a7c5828263c36281de1f37049ad42b665e129377ac73cf3ad4b0652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_snake_brown-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323ed24d23b218d3f0e311d99dc4dbfbd4a0d64bbe6f7c1866033e0b06aabe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_bee_sapphire-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f658b25800eadf90b920958a64ee863a4b5d6a584fb033be800a5f6c28bcfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...