Malicious code in polymer-gibogagaa-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df813c17c790a515379693b453fffb5e933c8f1b2e6c3bcde717c0bf46fae040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172741 Malicious code in ahunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effc96829195e72cb0965bef60ae534ce9eb779d8b3775d3caa276730c11fe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172636 Malicious code in @mipta1/r2seads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4065dd1a960c3fb93d4e52b6d8eedf94014df0020f347fc1804019456563da0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178901 Malicious code in teagod-naiman18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec439c42d8c1e6f847d9c8157db121fc0f28744c333c46b2928b5c2fef1c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174740 Malicious code in hitachi-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc9030235bea7ed078870a6aefe342da444f17ce0bb4ccbc7c08f374f2d921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171987 Malicious code in vinitsharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742ebb05acf693f42e64f11ea7ec37949599af2dce5c0f6c206061f2dab08f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

CVE-2025-25236

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to enumerate sensitive information such as tenant ID and user accounts that could facilitate brute-force, password-spraying or credential-stuffing attacks...

Malicious code in uaragifa-afaoti-urufuafayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cc60a982312af3cbd2799f24415b668c9870fe7208005f8d1e00d7588892f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158347 Malicious code in lookingan-konami82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279f99d27791b4d1d89be9ce99016ed5fbff277b6731fcb2f61884c13025bdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158674 Malicious code in lookingan-namakita61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea50ed0536651139c8d7c455ca76c918e56b4f5604583fa9c223556f27ab6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-mindatas-buip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25a99bf946535fb00406d56117d88d78cc6dcbadaeb7f9f4999eb9a7171a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-iluzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887342f458259c62a98b841ce0f63136b456a19cc7f01e4aabd0522770eef284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781a1c1e48bca70add675a0bf78e3a899ef182cbce9d9772bb7941a0321bd5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150141 Malicious code in @mipta1/mikas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9731ecbf09392f434ca9a57efae9b07bd6704746b58dfbc2987d47e4d585d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c525b257114cb86b24ebd0224d905bfc5dd12f698682fb30f9bdb383e6222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f25eb73efdc6a24c0fda816ad22bb1f9cc3d86ae4f86bb4867d8ebd9501f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168731 Malicious code in tealove-reborn8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f9a9c753f47a044ec3cef00afb13e2b594b2e6816904f544347a2e196ff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162681 Malicious code in nokire-kilua87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242be90fcd1ba2e4b5356312844013ebb517a9d30517217257886a95437531e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168178 Malicious code in tealove-coki22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7124bfd69f3dddea81305aa12418ce543b57ed65d9c1a7c017a3b113dcb78fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...