Malicious code in maya-lodeh57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb74337fcb1915f46cd9841f56ef1a0d7254ad47580ae7fa4ac21e96cc8cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-nasicampur87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aff79505f0f398f1d49cbc93141e20550285fcf5be1c34d6f4179c22a4d0f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136711 Malicious code in rina-martabak55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01edfa64443340ad5b81ca1fb176106d47e8a1af288212597ac5ac743f72bc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137597 Malicious code in uniform_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1f33ecb5ec0b525ddbff8fba5676a540f15746e7f78d53b712013136227520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf2bd61a0c1675e212fe8dd8fa06eb4fdfdb754d96a7ed7d019fd10cb52d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8b7c45056824091aef786c43560c5031a4495f05e9fc9a31b6510249965744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85a9a796b1ed5eb2d799f77f763a803fe2ed6e47cfb1ff7fdc919c7f2b7e0ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rojak41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa77644fe68b7d012a4598c5d9aa6e6e7a720491dad5f911a02584f375997a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gulai28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe247817a8da25391315eac31ac561d9e10dbae71f791fb7bd93154d5a51476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadd6474ef1b6be9d87fa14847a509944ac530cfe6c58c8a6804e979593174a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-pisang67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6700435ccd7db74095d3adb1e6f1fc58b8c145802d2617555b45d31ddfdfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-lumpur81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428a5c1052fb3272fe9ab00be6bbb7f494d3022c2fca5bf28aaa9726e02c4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128452 Malicious code in mahesa-lapis97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fe0d054dd9ef7d399112a19d2ac0395d08c72ac6afe13d23bc922409230e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad96448259a610c61bb48bdf9651d11c3ca570f8755ea4a62c1d53ebe8f58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tahu22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8847fbeff1fc28f0034dd1c29d8420e0a8c78f4de72a9b7e9b1633c3311506de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118564 Malicious code in ade-esdoger83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4bb69d7b5431e957098aa3ff94e16e56baa6042a82e8a64c456fb85bfff9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-gembus36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c417a612caa02b3dc9772db6857aaff85b060fee8290fe50c4799df34677152b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcfca5c981d61475da762cabf321f672e44d9ac3c4f9be1ed7b3c6a5566ef32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints

A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...

Malicious code in faithful_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405a2a9b9416e50d4ce2a6b9222ac0ef265bcc0b4c4942bf31f340057c76055c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...