MAL-2025-98706 Malicious code in excess_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75573e9ade14997fe01e4e88118c7cd8b106418dddcac4932c6f7e94f7a98c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98265 Malicious code in putri-keripik23-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9164e3bf4beb5e42ff5688b65b7941fdacc4ac7db6342d355d366929d76893f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93125 Malicious code in additional_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f93a4b9aa4412a2d54b965aa779ac9ad74193bc6b4ac95dde1a9cea1485ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64806

Malicious code in constantbedbugz3n npm...

EUVD-2025-64805

Malicious code in constantloonz3n npm...

Malicious code in wibowo-lengko53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b67bacd2e318c0385ee05c52ee64b857a2854032c0aaa0a0d767c6068c85a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83508 Malicious code in bayu-kentang43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c42dd5591247fc8938d81ccee30600f14196b3b0d15f8134821c42c8f80320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86681

Malicious code in constantslugz3n npm...

MAL-2025-84252 Malicious code in constant_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30849c9686032c082422da05e3dcf6043bfb08afd13a798e7702623c51b97274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84254 Malicious code in constant_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebefa7209a624e510ff5d8b88a154587827ef6f93e678e9eba3a4f68a0a8dcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96f527db22dc1dc98eca0d7bb5b9e33dfddf714596df9185765a713a744853e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55215

Malicious code in constant-chocolate-firefly npm...

Malicious code in constant-lime-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80612f031df483c564f9aa4bc20938e434e0f663fab74bfa57d9f28719e8fcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69718 Malicious code in open-fuchsia-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51343d1b3e01fcb8685ee47251e022c07389e7e80919d87f17d7e939698cd594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55213

Malicious code in constant-orange-tortoise npm...

EUVD-2025-55214

Malicious code in constant-lime-alpaca npm...

EUVD-2025-50501

Malicious code in constantskinkz3n npm...

MAL-2025-60166 Malicious code in constant_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e13c58813c2265ad02343b7c94a171bc89a12a9554845e44768176c91adcd12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52645 Malicious code in vida-tahutek28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f39bce789c5a80f6bb6eb7349e2401d83696308ac093480f3b459cb7e447324 The package vida-tahutek28-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

AlmaLinux 10 : kernel (ALSA-2025:19469)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19469 advisory. kernel: ipv6: sr: Fix MAC comparison to be constant-time CVE-2025-39702 kernel: kernfs: Fix UAF in polling when open file is released CVE-2025-39881...