MAL-2025-159440 Malicious code in manadsi-sfda-marafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3d2099ba9544735e696e4664689fd3ef71df60d2aea651510f84edd9359dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150784 Malicious code in @miptaa02/kasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9899eee5a01aadf08fbc7751720b06848233758b2bffcbf4db5bf74788092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakinam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d27952917ded0d996e1230534c07cda9b8bf04cde3dcd5fb30e169adb13ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-telesto-aether-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92288b49e8c91825ef9377e7d4104a9ade87af1b1c307a256eff1113212ccfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116247

Malicious code in babel-dotenv-mui-scorpius npm...

Malicious code in indah-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0cd8f9d0f8afc02e047496b771fbad245c43c8d1b0435e14ce89b0686664eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133725 Malicious code in gilang-nasicampur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84c6d28a572c9bcbe2452d7e0ef29a322e28cfea89a244a7af83a07e595daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kue5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4ee63ed77029d526e490e27a91ef1972a5c02c083c9f1d24e37ad6cbba3d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118660 Malicious code in agus-rawon61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed5f1cc4145464960e4e1f73e6efd2eb207f5d295184c84ac58fa9681cf8197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kupang19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c82a6e6472b6ef4ac3c6e42aec90e548bac7e7280ef09b44523a4bbd5f90557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121231 Malicious code in kiki-tapai9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb4bf4a58d0cbf385414124e3da6797adb5d476747b7682eb5c52a9fdd9cc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE-SU-2025:3681-1 Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.3 released 2025-10-13 includes fixes to the crypto/x509 package. bsc1244485 CVE-2025-58187 go75861 crypto/x509: TLS validation fails for FQDNs with trailing dot go75777 spec: Go1.25 spec should be dated closer to actual release date Furthe...

Malicious code in maman-sambalado26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c5b689bb013dbc8002b6831e680f4163dafb42cadd13fdfe4974cf7025b594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ubi95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c0ed06ae3f2fb72056d6b5f34da2433ba37915a54253084e7aa6287aac5363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111969 Malicious code in helpful_horse_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d0f75ad45c0484e249c3fece91a6c797baabca501015d737c02060eda2c4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-ikan31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb945f19e235168c5084f44b085d1c8b02c786c6ade7cffc9da04844ea288f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95958 Malicious code in powerful_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1735174d5b9f628d6803c267d196476bce24dfcbb84804bd72dd5ff9fd0dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95571 Malicious code in mysterious_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f83c265101f8581a321eec996c4db5d2876606b88a0abda637aaa6f2b94bcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...