MAL-2025-138967 Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138714 Malicious code in fantastic-copper-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f080f14db157fcd872069aa7162d09d6203c38cdbc56d3f1455484784b8183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138770 Malicious code in heavy-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e0c8927e1efcec41bbca952ec4d9bfe454a025ceecad348420ebe101bf4a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37afcb136cfdd076602d69af9c7bccb5c32cd7da2028b47860a8fde2eac0a856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-blush-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e988f3ffe2e015e75115acdd537cf61ab0a22c6fe7654f5704c784a3ed9b8a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139015 Malicious code in smart-tan-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6346393ce37cb8b00d5201fae5e8b195ce2de523c7d24b265a68e3f23021174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora 44 : cri-o1.33 (2025-fa02acfc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fa02acfc0f advisory. Automatic update for cri-o1.33-1.33.6-1.fc44. Changelog Tue Nov 11 2025 Bradley G Smith - 1.33.6-1 - Update to release 1.33.6 - Resolves: rhbz240759...

Fedora 44 : kubernetes1.31 (2025-a9a4d57353)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory. Automatic update for kubernetes1.31-1.31.14-1.fc44. Changelog Wed Nov 12 2025 Bradley G Smith - 1.31.14-1 - Update to release v1.31.14 - Resolves:...

Malicious code in umi-kue13-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2b6bdcf7fbb44d0970179f7220062cf06d3e6baca72d550b5fb52873bf0062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac29d9b133359b0ddb33adf4047b4a5e34b4fc3048cb18c2b2af86f727b39d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mangut88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad042b3f8d4a766981023c98a697ff0e1a675d86742dfc75b8e009514d03ab04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137494 Malicious code in udin-sambalado82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd08b74363dd339a67cf601af08f73e807678eb1aed3cee132014482a3ea3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133014 Malicious code in eko-buburayam78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31c5161a850a64ed3863207edb8a92ea902fa38a7cacf11a95005c22a253e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134902 Malicious code in kresna-rujaksoto92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89337caa8f521866284fc2917b6c8b41f2fa16ad1f6b1146c01174f15e283d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134321 Malicious code in indah-rangi14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb46e35c6893f5bbb58feb74e06b6bbb147f8ee26452d8bbd3c845e48f8c74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138049 Malicious code in wibowo-mieaceh69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05e2f47276bb78d66ace3b2d37dd04e0b86777a1ed5bcd06dac4b277b677a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134718 Malicious code in joni-botok3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314dee4ec093c139651960cce03f6b2de42c971b8cc25e313852d9680b9b9ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...