MAL-2025-116097 Malicious code in nurul-lupis56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fc1c5e424c3edcfb6c57cf2fd14b4a8b5d72897b4cb8dc7fd73090cc3ea504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116304 Malicious code in open_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092370c455169a99a6e0ae8133a420d900b719e73ecc540a2d15695dd4fac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112961 Malicious code in candra-gembus30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4030faa1a60dd73d91bf873b1dc87290ed5cb4843ca3f27d5a0747393eafe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

EUVD-2025-74582

Malicious code in helplessmoleaquamarine-54 npm...

MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3871b38954cd6cf47cd44f222e158b0550a835d674d852580c46be5f64a27104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambalado29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b57eb59197665d52d6fb0dfa9516cca2e70ac70863afc49320dc13b1c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68424

Malicious code in putri-menjes99-ruro npm...

MAL-2025-104693 Malicious code in joni-otak-otak35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12d2946bc703368892001e3ada1c46535396e37258b8b62d5daa318a12d629f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huhu-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d28b604e510f881a35788edd4d7e631c7afcc92e90c129231ea6cfe93e07bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83813 Malicious code in candra-kue16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5c6b2c0eef42f89b8cda2eb1f65e9343af385e2f098bf469cbfbe02537ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84553

Malicious code in nina-nasi46-miaww npm...

Malicious code in ocha-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fcb6638e3c8043e9d2b9e6aa194e0087bb9db070ee6114baa1ac4d51a387ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351c4d6add695be8b8e6dd5c2dfb22f3e5de93efb310bc14ad495aa26c664c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66021

Malicious code in tuti-asinan3-miaww npm...

MAL-2025-92747 Malicious code in yuni-serabi53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e01720270f06879c5f1fdbc3d354d95b36c2a931fc74fe954cc2c116173a108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86248

Malicious code in erick-rangi33-miaww npm...

MAL-2025-86871 Malicious code in iwan-kacang57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4af88f8a4d99d10ef0498358e3cbf9d00e889982c4aac0ae35c7c905eea7183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-klipo37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18cb050da2281dcadbb547c583cc492ef9714872ece392ccc8d753b22ab4812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...