MAL-2025-116431 Malicious code in prepared_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59181bc832a5ae2daff817d8c67e79357cf415fbfee7140a4ceb0861a4466141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116281 Malicious code in oktafian-otak-otak88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf98bafaef6ff3128462d1d33ecf5fa3a36b311fae6dd2e389ba2f58af0b494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116641 Malicious code in quarrelsome_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f2db7ec37fb1d015b5f40b39334873df4a6a8c38c943cb85bf4c18a9ced2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jengkol88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6507863cc5ff7e7753be52ffba73abf68fd2b113aeef200aa0272f5f6ca6e0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-semur34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d33e7260504f97816e473ac45d4c58c87cd5ebce2c7923f290e6de3aa8362d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tahutek84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f780a0195fff3e673e902c8091a38d0b1079d8d9b1693cb5fdfe8d02d6277f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114367 Malicious code in governing_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bbe717edcfec2b8833573588e668aef45cf9038d52e8a0511f005d4f0fbe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117704 Malicious code in useless_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e247010ca178b2660c61ef69c600116e3ca2dd800109d3b356922da72f3fe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115331 Malicious code in kurniawan-sasag26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0846034a7fb3e129478a285a0db87ca17d5bbbc45367bad1a4f2c4b8c762430d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113216 Malicious code in continued_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa27f69c7beeb6cfaf26c313f42786f67a4805f19711f355eefcc5f4bf019a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116764 Malicious code in rifqi-jus79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8681bb6dac38cc439b8e33327f4c986f8d0a3697ba2c976fdd2837cb20aef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114350 Malicious code in gita-tomat83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd6cab0a9238cac9031e2c14e81a96da62221df9833e992e96e957bf7580ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115609 Malicious code in lutfi-oblok34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602c10b66694dde8f3f02a92af0fca513af60d7ae07cc63e3f95890e56cc52e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118450 Malicious code in zaki-ragi51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c051738473b6df538738f13f7cb05df38b857dfcd172011c09dcb242de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

Malicious code in shiny_sole_coffee-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b31d42fa359973e487002618b52c9516596275d2065e4a706937a59cbc161b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112234 Malicious code in random_stingray_lavender-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d72c86e2933b22bd946eb0465eb4273cc9370c78c6ddea762d7edf0a4ac39ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_herring_lavender-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82c7901f2ede1f8036fd33fea813cb9ec7abf0a4b790285d45efaa9f078bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_goldfish_tan-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cbf1d50435e7fee81c2433bc1d0029b7b2a6fda2701085687363610fea5a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_bobcat_ivory-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdf02c34fc1f8636ec7bcd51b21ed0cacd105b294eb92ec6c0c546bc0aeaa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...