MAL-2025-65208 Malicious code in rudi-sambel39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea37315bbb66341ebf4f56aee8a041f3787c61ea3b06606afb732bc7e753ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63013 Malicious code in fitri-kemplang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66548f52cc91ebfa327e73409c220b1ee6f695a3ea6427b961864da55bb001df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66256 Malicious code in yanti-enting30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e417b786aeadb99c6d4af353fb4b3d06c73cb6f8cd33448360f1002d18ee8231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62105 Malicious code in binding_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deeb312108abcaf76a27e7c163218918ff9f585f80bb121ce05d8ebf5636d7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-ronde85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bb6634f7f0a866f498144a5e7fc0ce155fadd0403bf6654db95989ced93fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieaceh31-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068eecead14bf6c666519194ae8d6de70d59cb2f8418aa02e49de7be03f32e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61906 Malicious code in arif-botok72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e90fef25cc884cdaa488caedffef5f13decbc104098a5af40e5e3666e0855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-soto20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971c424777c9d29fb75db1b89d88ecb1c9ae18a49dfc42383d1542c91c829941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-brongkos86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2534ecd6569e82a0915872924bc73c1b611e6736a0ad5c94f4c45c5bdd34b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63712 Malicious code in joko-ongol-ongol1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1456029c3289a8dc12bd2bfe36f3d305a369c6dda361a54cf18640dd315f3b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65608 Malicious code in tiara-tomat23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdc7837f3d3a684ee6b72cbde5299415b9e1f688c06691bed889c91a64c4670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

KLA90062 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in GitHub Copilot and Visual Studio...

Malicious code in parliamentary_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 178631fbf4363e7ccc073a5d60f59e03d8f9ccaa910d703d940a363818c572b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60899 Malicious code in multiple_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899f8e891ccedbee6d5559c011a67f63255a24a1d92a94418dde481cedcceedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5c63b8c0a03c0aeca26524dbe95230bf0221e371732b016c8e3c1a5f8d00f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-telur33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908157e62994369a2eebc9e6be1ef583bf2762dbdca47bff2035392325f5e652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-keripik1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e63196ab1a721693910ca4acfeee1f7104676de3a7b493949da8d3742a11ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46a7ac0ee4db074a247a5976d00b134a0300c66bf30c3244a9bfd937717e503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59376 Malicious code in wandering_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7725b833e9bbc4cce72ad274c6ab49611f60713070a366f50c9445d71ef7cfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55354 Malicious code in bella-botok63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc7c423a5737258942d86c1b88aa0f0242fd803daaa16dbdaf5dbc1688489f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...