MAL-2025-147735 Malicious code in scripts-loop-zephyr-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858326367fb5a479f89e8a5c5167fcd21703e0e73a9fad660ddd332f1f78c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139710 Malicious code in aurora-run-script-ophiuchus-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241691cf5bdd46c9383783776eb754470cc879fa8b4b29a106fb767123215e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143419 Malicious code in husky-global-lint-staged-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149874 Malicious code in zenobia-sedna-pino-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cecebe1d7af349a9854bf535f00bd7bbee219677acdff8be924b2303ecd00e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146832 Malicious code in pulsar-gacrux-geckodriver-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcfe120a273827ad98cab31f158c503440f5d7151db9b0197fc91b9452b268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144693 Malicious code in markdown-pdf-mdx-eclipse-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747424ae8e5b12c9bcae09e5d8848665d283990b419b4387e97311c63169be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139078 Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40763

creationtimestamp| type| source ---|---|--- 2025-11-11 23:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fdpo2t2g2w 2025-11-12 00:36:28+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5ffso2glet2 2025-11-13 11:00:00+00:00| seen|...

Malicious code in yanti-kupat42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dba459c436f6facfeea0d7e0c1af78498f16f2cf5aa35eb6f4c54242b6780d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-pecel26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e473543209304c3b8b657ca0e7763e80535f60730f26739607348aa614cebf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d53e57ee07f3ac26be5f934a44b24ae168372f7eedd4aa0b5ac102df3cd1771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62514d24f40c1199c8237492aa42bd0d55104501f0cde61979e13a0ed449647f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ronde67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acc2b1550e9132e7bc0d8a6c3759f0a97fdbf0a0f24850f4335aca20d1e05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-rendang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8534b5d1692ec1b37778f0c7468ecd14c3b6d8d3a49e0fbf7959beb792f48b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-soto37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a92bfb247c6c26dd52035bc2ca4fc1bc40c05476436ac5ca55b41848ef407fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rawon81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739d01801e2f01c1a1c94c70d2ed12ca54ad8fd532355a1a25806a5334e261e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rawon100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528e5bb7c42526ef7842ece28f4316729ea3aa65f263199202dfc38556fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6c0e45e6f0c963af8d38af7807e79f74b4a693754a0b1d6cf5870eb79d36de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...