Malicious code in kisut-dfg-difzcfccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c8b50de7c333472ecac1c7b2acf53098cc8011c10b4fdeb83d62abdfaf6bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183198 Malicious code in kisut-dfg-dbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb4e7cfc0b99051f680de254cec0a32e50e97cbc695bab283b900b258767c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183201 Malicious code in kisut-dfg-difzcfccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c8b50de7c333472ecac1c7b2acf53098cc8011c10b4fdeb83d62abdfaf6bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183211 Malicious code in kisut-dfg-duban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e42f88a1595f21a0bc2101e12f805f8eeda7094b95a12b5bf0e0c33619626a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed351291d043149a80cb2e833183d0d1fb92891a328cacb224124ae69627c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dbn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb4e7cfc0b99051f680de254cec0a32e50e97cbc695bab283b900b258767c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183205 Malicious code in kisut-dfg-diwfzcfecdavcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c107391f4fae6eac63952ab8b98da103b0fd585a6f0133161eb36b0f8d4b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dufban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae053b369a77cfa28c60c4bea9d599b2aa0e13263ae02b5a20b17d975e27b046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183203 Malicious code in kisut-dfg-diwfzcfeccb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8591e6538e21825b6299cbcca735980a75bb363395a51984ebb3ad7e82196dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134481

Malicious code in kisut-dfg-dufadyan npm...

EUVD-2025-134484

Malicious code in kisut-dfg-dufaduyan npm...

MAL-2025-179666 Malicious code in kisut-dfg-dufadyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709d1a99d7ec830c3cb4c7af50d6a6e3e255ad604437a19eb9b873c1bd1e420f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134488

Malicious code in kisut-dfg-dufadiuyan npm...

EUVD-2025-134482

Malicious code in kisut-dfg-dufadyan npm...

EUVD-2025-134483

Malicious code in kisut-dfg-dufaduyan npm...

EUVD-2025-134486

Malicious code in kisut-dfg-dufadiuyban npm...

Malicious code in kisut-dfg-dufaduyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e03a8ffb74578ec999e4706b57597906f4cbbbb6fbf9e4b3ea5554c57f9515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134487

Malicious code in kisut-dfg-dufadiuyan npm...

EUVD-2025-134485

Malicious code in kisut-dfg-dufadiuyban npm...

DFG JIT Use-After-Free

DFG's doesGC is incorrect about the HasIndexedProperty operation's behavior on StringObjects. This can lead to a use-after-free condition. See also https://bugs.chromium.org/p/project-zero/issues/detail?id=1699 for a similar issue. The DFG JIT compiler attempts to determine whether a DFG IR...