MAL-2025-69791 Malicious code in overall-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c536ab55c7d69831333273948b66589a637b4b607fe9f5b986f2a0db027debbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67302 Malicious code in colourful-aquamarine-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693a11aff62626077e317cad975a8777fdcfa74a0ac6bbac5448af479d6983c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering-salmon-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb864a160a877f1bd4927aeccf9b9418ca0169485e1e13d400706b7a43f89a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-amber-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f4557eddfa98f3c2b08d9407da7f2f061561c6543f1bd6e5f02b4b29c10303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken-purple-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cad4ba280c21fc1e43614e95dfc9d3296cecd0348cb0153725886c0a5ac473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic-red-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381bbd79eb2d5770db9cd505541bc0138298e33715fc7aa03c01faa4dc41a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-beige-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a975e6272420c17e7f8caa2aefaa655799ee44e64cd9ab9b0c9663b85066d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-indigo-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b613105ef53bf922ae861edfcf00ffa656b34b1ed4bd9ea0a7de7f6546739c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863f13c59d30ddac1b03cb3b006c53bb6975cf73f037a0b70b7d116eb33b765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous-copper-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e1bfea5df6ef69675a447a70bf1763ca9b09a3463fd210481a8f481d385f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69901 Malicious code in planned-orange-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b0b3a8340e35bbf9fe0eed06b78ffc8672f99e9f4bb680d762b35468298608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70226 Malicious code in realistic-silver-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e89ed6c830543fa1162c4502ae7d80624973e8e50e2a9db51e2158b96800d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current-turquoise-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abd294580728bc27f22bfecd746b1a40d3461cf7057240dd0dc4759430b13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70385 Malicious code in right-amethyst-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d99f46a3469d1b9095f1a8e6cfcb287828f7a4685ad00c630a34b39838bcfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70147 Malicious code in quixotic-maroon-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcfdde605e5eceb76d816c525168a3a47f9034d6b204f43ae17f9e87d93c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE CVE-2025-64436

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-controlled node. This vulnerability could...

Malicious code in yanti-miebogor53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cee059f5b0da50fd588f1aea9dbad09ab3eecf71fc27a7ad5f1ff3daf3c08de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...