MAL-2025-130838 Malicious code in umi-sambel5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84365d2a9653573a6889d96255aa7387c33629b723b9d91c4ae2a45d5f1ca9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jengkol72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836bbf6d80999f0c98e37571ab10c8e3dda9f9beb77d9d944d534e85f32639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6367798c8780647fa3e6694ffcf9d3c89815d823ed0fbef2db6abd61d8c48d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b8ed44ea51ae78e87f83b530d9a460f357f4848278118176d5b5c8d56f843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-keraktelor11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f058e3f6c4b5f3ee448dbe7093d5629d3de45709aab848360d8cc821c05dffcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10005ea196af514d346fc6b00614c19cb9b7780f04c7c63f029abd47e247b174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123567 Malicious code in thoughtless_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22127dab63bde890c2dafe5087afe735b93bcb908e4a9517d243b7d54dda5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106508

Malicious code in attractivekoalaz3n npm...

Malicious code in nurul-tongseng6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3584b3f649c0d6b5cbc4c79d814590bd3c4a1ffded7f7c0fc115283810d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-gudeg33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f67b0b7e8065a86e6da1e63db5b5762bab202561eec229ab1eed28cfd001d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lumpur98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8ac81a9116616921b688c9cb873130ed062c9281d659c91df12075e183066c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119922 Malicious code in fadhil-tongseng80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4d5abeb7abc7e990c307f259b685d5d94e6ba0255f753a3d5794f0443a0909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123319 Malicious code in slight_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0f8761c3788c84b04475c580efdc66ab03b6229164280a8bca7d88a15f6e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121097 Malicious code in joko-nasipecel57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75558dc7e86071674d9dab0a3e0b609305138720d3dbbd6cbae81b7cbe036fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

Malicious code in residential_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690a8c27e93ba4662df702dbf1aa3b0fca3bf90afef900f7fc04aec8d903f5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90152

Malicious code in maman-sambel5-miaww npm...

Malicious code in rudi-rujaksoto28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad35920f2357ddc167917226a6811df59149f0a2be609d3d286e9083ab0f909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sasag83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ab8762cee06946b52f681abf3984b7651585fb436343539df140303dfe1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116528 Malicious code in putri-bakwan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee46eeeb7ef111585b04e5a4caae49cd234098f3de3a499da273ae31cddc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...