Malicious code in hanafi-gorengan27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300b7ac1a292ab48ebff28df1a0c6da5e60875718db5ba7049e38375ffd30830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118064 Malicious code in wibowo-brengkes97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2fdd74bd3548d3ee1deec8c90e0774584a142bb18d805d24715b8fd74da377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113568 Malicious code in eko-keripik50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19940044d879310a7217e713fd2310fc0260d1254d3a01c32dc17b2df077dcca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117006 Malicious code in selfish_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7276bf87dad2f42af4944a90372cf4164ba448474ec707d675d4e6724eebafd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115699 Malicious code in maman-brengkes30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5a3da93ead82205e9d82ac6fb03046f47c1fad1791d31c3a5983fb7caf3fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597c8eebf77e5aba4d446285a84787b14757db90cc473f358068b40b0b040801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0dacc58b6bbed645343d13b82f661e6dc9925c60abd26365cf2aeeb3319993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lapis87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5372e4f27098ab1e77ea5d710f1c9402337da56db75ab8ba43c37c66430486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa182b5d66d102d63b56cd03a0958387cee39e9b20aeffef459cbacf115d8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-klentik56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884b8f9a01614a41c058857a0aad9f28905dcf1a7699c665aa2a60fc5e92b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3146815cd0f950a92017f412e125faee99a358cfc704f75f3fb02a72e84768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114072 Malicious code in formal_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6d48ceedc9a7ce198d036c47bf0346b0e57de3c7f0013b1f84355d08a9c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116222 Malicious code in okta-gandul84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5816a5818ce005006e65283088f884fc357e4f484090225d3cac521bfe64fcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114960 Malicious code in jaja-ikan29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1901f330da0fbd46e8550e748ed8a70410a0735f3d9b042704e387ee680d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpurun loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpurun loop to fix a bug where KVM can load hardware with a stale...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_lobster_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21efefd45db9af7eddd4266ad0cd91490c86d0c3e7d4ac900419a890d8e0b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111645 Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_gorilla-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94df7faf0718adb4e8643c9e14605e1cfee08a2677ad655c08d0a8c9ece66ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...