OPENSUSE-SU-2025:15736-1 chromedriver-142.0.7444.162-1.1 on GA media

These are all security issues fixed in the chromedriver-142.0.7444.162-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in mahnu-nofy-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f44b504b6bf2f8f71a4689e1cb2ee8bfa3f54ecdcd17265d6bedf2686c8c515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138934

Malicious code in poglymer-ogih-ga npm...

EUVD-2025-138536

Malicious code in polymer-afia-ga npm...

EUVD-2025-138517

Malicious code in polymer-afifa-ga npm...

Malicious code in polymer-afifa-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ca35839a262070cce164420919ea7fa06920470be7ce72cf4833d6d2724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1e2632b5303bb5cb2dfd37b6e82d5ef0a6731d9a4d5133d05f3375798f107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahaffheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5514e3990d02c423f5c0d19f50e8dd656bae0002f7c659b988f3bcbdd176f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-af-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c52caa1a763bd872d0a4758b2cf240044408ad0e3bba8371497e6eb666b2c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafheg-ga (1.0.0)

nudela-rahafheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163828...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (1.0.0)

nudela-rahaffheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

MAL-2025-163822 Malicious code in nudela-rahaf0fafheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd4ed4e2b36aa13b9071d0b6ca5b25bba6c79a4f22cbf8a9b1517898ac046cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146454

Malicious code in verify-ayali-ga npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

Malicious code in nudela-rahaf0faheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c4ccbb76699949bbb4ba01fbfe962e9adb6d3d1a453c81676b696267d0b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170358 Malicious code in verify-ayali-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e95bdf4d9f01f6daf8d19a3fc7389e5cf3af53f614cd0e5b4aeedc3a4d1552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantu-nadas-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e48efe7f4aed0741a41d83a15cc92670796734ac9479d0eedf999e6d7ce6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

MAL-2025-163825 Malicious code in nudela-rahaf0fheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b63f9c60bcbdcd6ff5ee966e49382ff2416ea3e080511ebb3b84897d494b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...