Unity Linux 20.1070e Security Update: nodejs-hawk (UTSA-2026-016758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016758 advisory. Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response...

EUVD-2025-117154

Malicious code in prospective-olive-hawk npm...

EUVD-2025-117410

Malicious code in ethical-amaranth-hawk npm...

EUVD-2025-117500

Malicious code in bumpy-azure-hawk npm...

EUVD-2025-117382

Malicious code in fierce-black-hawk npm...

MAL-2025-138602 Malicious code in bumpy-azure-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5f81245c095a0db2baf7931861ca5afe91e1f67699c5758ac97ac1111fa71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective-olive-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e41a01d75aabd881d51182d2d1dd366ffa745cccd7eb2e7ad42a4f8efe19d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135139 Malicious code in lexical_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69077f196ddd4739859dc48daa5fbd18367ec168c9163ed8fad921bddfb6b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef36a26072602575c080460f98fe74b1261e25fa9e4a00c5b16da7372eeab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132856 Malicious code in dirty_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92c2e90b23cf164760d7ec1db90d99dff3150f15f834795f5b388ee7313aae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102706

Malicious code in realistichawkz3n npm...

EUVD-2025-101746

Malicious code in tighthawkz3n npm...

EUVD-2025-102100

Malicious code in spontaneoushawkz3n npm...

Malicious code in private_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a1383a491ea36cff8be44e191693564524a2250ed2a22b97fc2ddb7dd887ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104680

Malicious code in historichawkz3n npm...

Malicious code in scared_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e15bd7de43b972318461030dfddf61afcbf24406f9306bb839795b3f0784406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122400 Malicious code in old_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c8b1b2564e18800bff7f76109194410cfd22c8e7db0a052a7483e8e1001317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95711

Malicious code in purringhawkz3n npm...

MAL-2025-124698 Malicious code in zeroth_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52c9acb2d6f3b664da6d6d09e5537ff7b1a84a4c7a4248f008e5896ad5ef74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be321515a547bea9eb5457c7fc6ab6f6e86d5d9a3ce19eef9a509b6ed853df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...