MAL-2025-114072 Malicious code in formal_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6d48ceedc9a7ce198d036c47bf0346b0e57de3c7f0013b1f84355d08a9c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114960 Malicious code in jaja-ikan29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1901f330da0fbd46e8550e748ed8a70410a0735f3d9b042704e387ee680d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116222 Malicious code in okta-gandul84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5816a5818ce005006e65283088f884fc357e4f484090225d3cac521bfe64fcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597c8eebf77e5aba4d446285a84787b14757db90cc473f358068b40b0b040801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3146815cd0f950a92017f412e125faee99a358cfc704f75f3fb02a72e84768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa182b5d66d102d63b56cd03a0958387cee39e9b20aeffef459cbacf115d8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0dacc58b6bbed645343d13b82f661e6dc9925c60abd26365cf2aeeb3319993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpurun loop Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpurun loop to fix a bug where KVM can load hardware with a stale...

Malicious code in bad_lobster_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21efefd45db9af7eddd4266ad0cd91490c86d0c3e7d4ac900419a890d8e0b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111645 Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_mammal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c508f7acfa15490934686e52ed033283e025db265eda5c4319ac348430ac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_opossum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feb80b37d70dd37fdbaaca79cef61bb0cec83732bc26b636166dd950f8136eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73702b74c4f5f09f9811fbd61c1b3ef5ecd1e7a15e90f9d1bf88a54ef23e4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy_narwhal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65a52e2e0c702c6dfb1ab0a37a0f0953bce75eeb735379eec0287299e3b9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101132 Malicious code in ctvhuc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea243892493a4c55888c40003f4e966d87b12eb127f8e44153b0f2b4f7388a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_gorilla-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94df7faf0718adb4e8643c9e14605e1cfee08a2677ad655c08d0a8c9ece66ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_panda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af74677ec235aad8ecd37e658fe81e2bf6532ed6f0e24ddb663473a75db3057d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...