MAL-2025-179697 Malicious code in kisut-faig-afigufib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ced33b129de727bd99ab4dc09e5860392cbed7fca0cfe8e325a29bf6810ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-iani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76df5a3172e2793a2d19a197b1423ce0e2e9aa78514830a693f517aa8e5b5654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65151300a586714948b439bcd15c5bd934a4ec8c82fefd1e471e5c7c8e7bb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yug-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d611ed6e620e0d6ec5df092d31171a1ebd1f7cae506b24bcfacf87cdadfcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hapdits-rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0132e585f8b1ad9465aa02d50cec1f58a7f895af27b98e658c2414554a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

Malicious code in hereis-manuic-tamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5f56fb196ad2501a4aac5ce6b60927a69cbaf76cd06206ebe31d7e91630fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maia-ubanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e14fe2d524fdb770e75168bf8549c062082cc09ebed3fede5aaac8263153e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abigailfoster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff7949fc4c8cc0853e9f77a6b483b25a73a5765acf9d19baf637b2b667263ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07ea5f194f8dcce18cc7ad427c76159e71ef0d8c155077a29fc4ea5e5cab0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c322091041c59de02afc3628ca58be55afcfa4aa5935c82b551154f2922b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-hissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3e17da27947b2982ec3ea235089d350f9e36f3b46bf3f394c833be0d401a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161378 Malicious code in nabuf-oguuof-dusuhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe2dd56e92733260359449578b9dccd4b602baa171910434e3ce6732e8ef25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157045 Malicious code in jelek-rasaaya-nurse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af77e6d0439c8ae6cde096de45659f0b26481f6c1ef1eb084075f81d06228472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47112611f1979abcddc993c6698ff847b757a067d03d68bffe2f08a1ea7320f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157960 Malicious code in lala-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae730593326c658099057f84ebd89c8e15b1e471bcc4103cf5fe14a5b1c42ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152525 Malicious code in alvira-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bd7c630097e0dd14f8bfe908884975c75c66a45f666ec337e6929a8f8ad48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dd4ef911624c238a1ef6ceb39852964e684020b65f38f013633710a8a4cc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...