MAL-2025-183235 Malicious code in kisut-difg-diwfzcfec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ce8e7190d09d93ff0b29bf9e71f8bd1970bf432af9d236166513ec5cd66ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184417 Malicious code in modiov-kihon-afmaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f55b4f08abea5dc824ce3a2d0b4a6b38acc4df7826fec9aa7f79df54118bea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181836 Malicious code in avangs-olioms-nolisdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892a95c133a9a85fa6f61978fbdffa5f087cd0bb847fdd5016ccbb5675ec7c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182982 Malicious code in itale-dci-jygwuuyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797f3045ec0d8cbbae583cef28f21579e1f1c15f76676f66913cd39625a24078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182116 Malicious code in gocay-uga-viguai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d5fe1e7b8d21f66d8c2e9aafc40baebf223fd2ea16600efab09998cc92e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183619 Malicious code in lomi-ifush-ugofalifufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86167b4c74de89854397ebea7ca70b7abf2e44ef1e4e59ff6cbfb7555b6f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184303 Malicious code in modiov-kifni-ufavcseqinsdxaoycurptvmaduban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec866ee2460c7f8f4e1af899b9ebd5fc327b2176f0ba071110c415172ffdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181870 Malicious code in avangs-olium-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b4f3b9e3ceee00446b5c107c09d95da19afd580ecfd4e464e956f7e44ceb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183425 Malicious code in lobac-ubb-avigyagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a61903d7e2715b95d9139648a60f9f8c6e7dbc990e773635ce6942fc2a2a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182797 Malicious code in itale-adci-aknkonyunaymhedti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38c13338fded806acd0d9e38e13050405a242271c145977cc3b8798539fa412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182818 Malicious code in itale-adci-akontolbapakmuulolotrtjygfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6a190874caaf9ea38871049745a5fc31d98da7a0100d8546d3d3142691a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183155 Malicious code in item-atm-kujauhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30bceed700188a6e10d0d10d9ab9feac0f233879ff9faf9681e7aeccbb78809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181593 Malicious code in astam-akif-dalimunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614bd4bffb2dfee60047ea1585dff6b5d5a06f6ece161973e2c686c0f9d45523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184281 Malicious code in modiov-kian-avcafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a7860cdf1a398ce8e45c05032718e9b741505b90da3156d24db255ac6227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

Malicious code in @akunsansan0/karedok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d9c1fb43b93059d24ad0598bc636e7b55ca4614303cd93a78edb37f0da9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e3275292e15a314ce58373d38e5ce5d0e5e4db69c9a9d6d82c0a1d2797014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924308bd680198cb5787d818c355a118902669ab9c272befdbfeb91416d726a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46d594f19f1f15acbaf19198e316745ddb1a0f18b65ca0dd920c8b7537a1def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf5026be8d51ce239af102f511c88374b13c008411eeb161f14452213fc53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...