Malicious code in explicit_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6796f2973db648c6967ebbdd4f3a32155caf475704411820c25664db5820a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4fb84ec95dbc5f74a38922aaec73b258130ac79b361e62e492c71fd6b38a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tahu88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5d35e99bf3b6fc02024d46b417f82496a3a625e451ca7f50b57d037bbe09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c162a39ba4b4d63336ba381268b1f4bb9b13e4c11a719675fc4cdcbe7d53b4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8649b2a1fd9bdded99a573b459ce9cf3c3110a70fb998617521c921fc602a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-otak-otak17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e861f3033859743a7e33bb2db0798ba79f0120f1d9ec72d8d037d1b9ba11a325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131921 Malicious code in ade-sambalado10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714db63464f30b53a13473533860b6b4212e4d41652fffd9e558c19ceaeb9219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

Malicious code in dian-serabi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee681e96c58c2f4dd4ddafa7370dc3b2e90372837f6457880e68c434135242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103547

Malicious code in nana-ronde18-riris npm...

Malicious code in cici-ragi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c61d534404b6298faa410c72a45dbdea292875f3a21d04877dd55c27c44d11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129672 Malicious code in quickest_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916aef1488c325d01187d07a66fd69636ded99cccf9fdb61c798fb8ae97b976e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kripik18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f10930543838d6c6c91489f6077e636294e7660bf67530cd64b3e907aada2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-klipo41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f1ef41f265c36bbc3fc88f6addeb5d909788135f33f213d2f0bb0b82a38410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tumis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-ketan16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8b47de0c5a5ad40e2f8d210af3684956953b23604b335f1e46d810bc477fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-semur74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe9bda01adbabcbc34d2d116b5c7065518c2962828821a0bb50493047f9df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7ae1d3604e6f2893fc6730ab9a7c06effa92540c08cc1e4129d3788398bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00247abc8ce946848d32ca39bc2a87ad6ebcf10f5a82e15b96db20512ed501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128631 Malicious code in mechanical_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0935160e98d0d2a801df58e18166ab89c13720937426b49b5f632558b5da3440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...