MAL-2025-181760 Malicious code in avangi-olia-itaniabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6242aa9188c361d39bd7a11c9e8069c652de8bc25e3c6244f867263e4915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183555 Malicious code in lomi-fuis-fangsuaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3103d8e57e368528ece53fa4c802c601ab64115571c6c2c8e3fd580e6962fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184030 Malicious code in mitoko-ontcami-lai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82576c1427c98cef2ce838aa805389779b5ca02d093722535d4134a6f54f5e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184995 Malicious code in sonic-kig-tifuacfivfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a293966a86c0e4e77684e84d9b7e09cbe170bd43c842c53b954e90c6878ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184276 Malicious code in modiov-kian-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab247cde12957095f61ce557692f871ae5fb3df51e188e2848c2ef48efb0d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutug-adibalonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d039f4b737e4b629158dd5b7f57189db9eebf3d2bbafbfe415b14222b18f117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

Malicious code in cukul94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7da31cc8e37544abb9d11827115768457a66a04bfd2499601908a390f23bc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e6f663021d3074a519d53907d7c910f10569a3aeda699925c4b447fc3c7adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636deba3531ee592478b89de2d87e8a042cbb957935849b8f7b452dbb1da8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6408b494f9a1b8a3a52e65e32270dc1edfd25740fa3bfedac11b4e6e61b84ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43155d3551d5488ca32e9f99fb437a954d7505266b35d659977d2c1b92a89e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b3034bc98367d6acc47ffaa2994a7dccbf56491763f2bd4e75da60c14f990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181341 Malicious code in @akunsansan0/susu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22311b399fef078c6894f01fb4e29d5923ec9ed74d5c8d473347b6a6e185779d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ccc6dfa94b4fb551a3bf82b8e0b5e29145524157646ef8318aab64952332df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181331 Malicious code in @akunsansan0/pucuk7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7110fda85f6f6cb0da43d4672be16d01be8f9139ee302407a03017ef030035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181386 Malicious code in baso3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ccc6dfa94b4fb551a3bf82b8e0b5e29145524157646ef8318aab64952332df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...