MAL-2025-185341 Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184317 Malicious code in modiov-kifni-ufavcsequban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e00b05801c8c01ba8bad1cef4508646ad14a5d26eeb44e51c8905030914bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182264 Malicious code in hitale-irher-aeswadwadafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33564b20c41957dc79bb28be9cc65aaaa30657f9a65815fd425c9944f7e3d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184407 Malicious code in modiov-kihon-afbaufcaducxabnyvacmgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f389db5681e67a2759cb6f8a9bc68ad3bcd823b28492a70f2a4f858166ade7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182119 Malicious code in gocay-uga-viguvfuguivai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a932254107c484cd10ba65cf8d7f8f148261756cba8106444f7e3d5a7918b2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lamokoinabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b711ce1333f22f4e7833536eb978d9cd2bee00bf27f2585366aa4f84792c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avo-cbv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb20b60fb713ee3115c1d309201c1ce1fffc3e617cd4769533dcc8afd24f33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182737 Malicious code in inda-foji-giaiuasfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ea6a2ede519f82e9b0471ca2e2711db9b4285b58f40864fd2d4d8eec77c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182170 Malicious code in gociay-ung-fugugaicagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6828149eb90d1d16a96f8c781bfad5ee05aa68943908b0aa891bf71db2c7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184365 Malicious code in modiov-kihan-afmca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bfed3c26b4fb2af9638426b978a8339a15b12326bddfc55684505c322da3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184303 Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmaduban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec866ee2460c7f8f4e1af899b9ebd5fc327b2176f0ba071110c415172ffdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182321 Malicious code in imodiov-kofi-cuauccag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a466bffd8133e32682388695e1abb04b2c678e2f0007fd1486314c72fa3fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183654 Malicious code in mahnu-oy-giossi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255e6ea008bdf289ccc982cbb9dc5ea078312988408a372806b462a2901ece74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184127 Malicious code in mlokok-lofeki-afahinaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8b104a42e50a0b71b0a124efdd6327a934040798c44509c1ddf275dd589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182887 Malicious code in itale-adci-gnuygi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ab9e04ed2aa348bbbf0f7520ca34945958f08e00f17c01ee7857cb6731ac7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182116 Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924308bd680198cb5787d818c355a118902669ab9c272befdbfeb91416d726a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...