Malicious code in erwin-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58698e0f46c75270506b936d8be9b398e7fbf2c58efe269a6660e09b1408b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-brongkos65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d7354ad0cb613be0dc3cab77d9cdfa32ccf381794e6eba832f3b0ae35b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tahutek7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ceec550527ba9eaa6bbee77c363f6c8ef1a1db536d67545a84bc8f3c62c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131183831aeb5e3a3f256422bc62f2f8ed8a54c53200aad63b982020b643335a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be31574613e913782f9b5fa36aea26dd8990ac986f2cfbb5517f9f8bcb4ef3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84347

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...

MAL-2025-113942 Malicious code in fauzi-nasiuduk80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e4f273905accb16df06ec3343bf0fb251ab9c4f9f34c432c5c87b25d895796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11085

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...

Malicious code in biological_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3fd77fd428a90840bd745f4bc6cc03fc0143c3264ae51cb3abcc75b4eb89cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-sego62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0633ba84b80ea8ff196962b79f2e612c76a65cb605562c455ea53d9d094c9ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100245 Malicious code in candra-serimuka37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88bd710020ba9d2872db47ea784bbc069d1b9aa30146061c095fabd97e68675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-nasicampur67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a294f3084a95184bed5fb5a401120d8ea187e7dea1dc65e48765e21f232bf9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98833 Malicious code in negative_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147bcf0d0b5413a3fc825ad05d0076818ec1fbac83cedcfee75865e58fe994dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98155 Malicious code in nadia-kue50-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a2e4cdf01b07b69059012305f9c3e6dd43532968ab684e7896490f213b8442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1321367f72cea9f5eb2d20ffdf344bd401fab9de469d0278eca2ce96a5de20b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63435c71726554aadbd9acf69e956d7e7a963ae4b16e3b9f4255642602c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f23ea0e5c87bfbb863cf4d4f6cdecfbd891e54db7d9ac1bd536b4d9429e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df50086d54e9096f27506423cd654731f81b19ea9aef152e82c0da6f314fe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...