MAL-2025-158347 Malicious code in lookingan-konami82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279f99d27791b4d1d89be9ce99016ed5fbff277b6731fcb2f61884c13025bdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162681 Malicious code in nokire-kilua87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242be90fcd1ba2e4b5356312844013ebb517a9d30517217257886a95437531e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161538 Malicious code in nabuf-otmbian-ifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9eb88b1e4dfb9b82114e1eed9c556cce11189667313ab5188dd5936eb6a944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: ipv6: sr: Fix MAC comparison to be constant-time

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

kernel: ipv6: sr: Fix MAC comparison to be constant-time

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

kernel: ipv6: sr: Fix MAC comparison to be constant-time

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

Malicious code in element-ui-postcss-less-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11f7dcb4ad8d3d253c970e41541c585fb88085c98c421b82c65f7f0453e9fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-norma-lyra-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9e34bcf1e3c5b6e4923008129abe4146826a6a6147d34d768d2ea843dd9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-meissa-commitizen-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e26e15537f1f0a2acb7d8e087140912aaeaa25fce5623fe76057bc299a546e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-aquarius-selenium-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5c2af9e703d23e07f831f6ce27c38ee3fc7977eb88fccce182c8f6d1b82b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148975 Malicious code in unuk-apollo-spectron-webdriver-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d734ee8393ddd4f3ccab4d05b46d4a8085efb891d8ee9e67bc44443567abaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143978 Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147285 Malicious code in repository-webpack-hugo-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa17606ae0bfdc71baac8f81e5f033534a0c52d09eb5e5dca59d3079814ca2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141670 Malicious code in docusaurus-lyra-ganymede-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0eea79486e0ada48de0b1c4725370f54af12d5621874cdacacc2cc14e24fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f643f6b52f0260c9454688b95abce30d27fb1150babb85b84eff54db585e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telur37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b020dbd27b9a65f0b47aaefea8c61a736353f099782b04c96b62551ad3d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tomat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bf6116f4e63e0fca65943d0ac151091f1d3a9da54ba2b2908e83165e8fb595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135622 Malicious code in mulyono-lapis6-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a66d89427a3b702b95490344253a8d3e02ab812135225ed6eaf2b424199923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...