MAL-2025-139090 Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-jade-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579714306228154cf3109f2a3d285fccbc11425974d58c8bf2abbd4c41d458f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-blush-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e988f3ffe2e015e75115acdd537cf61ab0a22c6fe7654f5704c784a3ed9b8a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138967 Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138781 Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138964 Malicious code in rapid-turquoise-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f200365c9f71994dbc02253eea8ba63182e43b73b5ffa0c9fbd44cd1b34364fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-red-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485341fe5f2687e3dce686debb22e9becfdd35617ce35f8827e4ff1de2009f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora 44 : kubernetes1.31 (2025-a9a4d57353)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory. Automatic update for kubernetes1.31-1.31.14-1.fc44. Changelog Wed Nov 12 2025 Bradley G Smith - 1.31.14-1 - Update to release v1.31.14 - Resolves:...

Fedora 44 : cri-o1.33 (2025-fa02acfc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fa02acfc0f advisory. Automatic update for cri-o1.33-1.33.6-1.fc44. Changelog Tue Nov 11 2025 Bradley G Smith - 1.33.6-1 - Update to release 1.33.6 - Resolves: rhbz240759...

Malicious code in riana-gembus74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07f8e5f5678b757f4d3ba47bc7df942e5ba9cb903728c793f1f8cdcc27ecc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa493afd0bd742460facba502b3199b481ed5c9e9a55e7d3baf011993d08e730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca62840302d8b082c4b5224813d1925b967016a33bfef4df1f915977bc494c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143319c283d109d52d2a33f42f17b2876027e9cd7b2cef5ce20654e7e78ba425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-dradag30-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c760aa1350f8126b68c91a60f2bbca89cbacbdaa6f3b0099c79a097b598b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jamblang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e95570297db8dc9188ff6ed0ddaaf78ba6fe8e58e2cd24bf8c2baf1e2426e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-esdoger38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521c803f26f5615fdd7b1564871421844303080172ec83a1dd3fcded04ea1a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rojak99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416ab570f10e66ec4190cbf7561a1c347ca208e8849052f98a8cd828d4a83bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...