Malicious code in nuilva-avmim-rucoposivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee08c7ff64dea964c75f3c2307b89f5652ec6682ff18c97ad4d341414c831212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favavraia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61ad79fbc01e8c3f050333f4c498becf893502ce8bb75eeb6f7de8d9511192c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177232 Malicious code in poglymer-ogaih-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfd8a669a7c3b11f9b8627f77655b671af843b680dcd7984cdd34a43e22318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177098 Malicious code in nuyar-adudar-badya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimanadeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9079f0921cf3811bb0227615a47b61c23aa96922e6ed19893ef806eb77433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159440 Malicious code in manadsi-sfda-marafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3d2099ba9544735e696e4664689fd3ef71df60d2aea651510f84edd9359dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150784 Malicious code in @miptaa02/kasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9899eee5a01aadf08fbc7751720b06848233758b2bffcbf4db5bf74788092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakinam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d27952917ded0d996e1230534c07cda9b8bf04cde3dcd5fb30e169adb13ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-telesto-aether-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92288b49e8c91825ef9377e7d4104a9ade87af1b1c307a256eff1113212ccfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116247

Malicious code in babel-dotenv-mui-scorpius npm...

Malicious code in indah-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0cd8f9d0f8afc02e047496b771fbad245c43c8d1b0435e14ce89b0686664eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133725 Malicious code in gilang-nasicampur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84c6d28a572c9bcbe2452d7e0ef29a322e28cfea89a244a7af83a07e595daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kue5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4ee63ed77029d526e490e27a91ef1972a5c02c083c9f1d24e37ad6cbba3d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118660 Malicious code in agus-rawon61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed5f1cc4145464960e4e1f73e6efd2eb207f5d295184c84ac58fa9681cf8197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kupang19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c82a6e6472b6ef4ac3c6e42aec90e548bac7e7280ef09b44523a4bbd5f90557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121231 Malicious code in kiki-tapai9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb4bf4a58d0cbf385414124e3da6797adb5d476747b7682eb5c52a9fdd9cc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

SUSE-SU-2025:3681-1 Security update for go1.25

This update for go1.25 fixes the following issues: go1.25.3 released 2025-10-13 includes fixes to the crypto/x509 package. bsc1244485 CVE-2025-58187 go75861 crypto/x509: TLS validation fails for FQDNs with trailing dot go75777 spec: Go1.25 spec should be dated closer to actual release date Furthe...

Malicious code in maman-sambalado26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c5b689bb013dbc8002b6831e680f4163dafb42cadd13fdfe4974cf7025b594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ubi95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c0ed06ae3f2fb72056d6b5f34da2433ba37915a54253084e7aa6287aac5363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...