Malicious code in grotesque_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5204c52eb5c7b2328f8afea7efc5fea12a33df8fdcd8b91c27b410a21411bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f0efa00824f349fe781caed2b669197f7154cf8c0a454c3f8c20f1351f99ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-miebogor89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743c648fa0ca916cb0ba65b19ac9429dc827b62b8278bc1c315d028d26611cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getuk59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f5c781a040e49fa502a25f06cce088ab0510f03b7ff30ff8ec07dadad07689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-empal69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39f90916573d915b3453f95efe92459bfd9e438f0d8fa26276904a912d9c675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sroto4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df842fd41b65af31b94973a0147e62e07b596160e5b848c8f5045d00cb7d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29198d19fb0c021baf2f71d6aad95fe0a35cfe578f09cbacc3814b8b6c2df95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-tahu93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1ebd3520687ef713e6346b2be9dd4f751d4a4889bd6153fd2326422520abca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tek66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd75f718ceb95457743c3e474e27bcc13e8bfab1b92f80b5491e81282954006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130406 Malicious code in surya-jus22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438957b75c972725939483529fb25a3b6c34ce987a42fef13c316d14b35fcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131404 Malicious code in xaver-asinan99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d310b549d72341e898ce9198ce6eb384c0faf2c21ca4f5ff90c1e43701a0b07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128545 Malicious code in maman-toge8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ed4136f331ff869769db70304963bcb09ca4dc0bcfbdb30cce9d973ec4404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125658 Malicious code in curved_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b0fdb566ee8d07c8b3b5f1ab52eeafa9c8e182135aa93eb0dfd8d2780129a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131454 Malicious code in xaver-rujak74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c25b28c450bcbc367d349c90985e3a547612b2ac528d3fe0a70f4a6478c211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126753 Malicious code in gilang-keraktelor35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed90ed65e76679e39980d5857f17b769368401099f3be9fed2c0b9294b1b83a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64433

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mounting PVC disks into a VM...

Malicious code in rudi-nasisayur36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5e5c8470fef4db83996fc2bdf8c32b429b6da71071ceccf815a487c9cfd919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-mie67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f477502f2dbfd8af01ad2411617b08759754fdea7e01654465cb9dbcbaf20f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-asinan73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b048d7030f6c66c1b94344dfe0150c74b06376ba372252b26d9dc5c3199d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-rojak85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b835026c32c9376b60fddb950975c8a21ab9f9c4f5a050b30d5baa91345566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...