MAL-2025-173238 Malicious code in buis-suinana-mamovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f397936297864215b702725af63d508c6e9ab1b42f57b0c362986d502117ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173727 Malicious code in butauahur-sofi-dosapih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1b8ba026d56a76e5791a5b79e9a2191d6c8916061798eb7ba7e47d90a711c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

MAL-2025-172303 Malicious code in augis-pomo9r-nusfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8b8f9965cc0ed1b2180348071247f4d2da865605bd0ddf458193ef97283b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172607 Malicious code in verts-otimon-ogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872cb297818c843979df19ba96cb5749ce1d6e9959133537ca33c1899969b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saadimran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edbfa7baf2c55bc1c8fc984e80ec112f9efd5a53d0c54f5166f197cb465b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alyssaadams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0312a194e9a9a5d8e68d55243e4e4137dd749dcc1debfacca229961ba84986fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171724 Malicious code in planetplanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13082571953383e36893dedaeafb207ca1bc7a35e244964bddb2fe7d7544c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170787 Malicious code in alexanderwhite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342cd5c3c12f415d40217860aa78a43c0b7050c997f83913a5149d847bafd783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1df2624be20b8ee8126b85c74edb48a22c8b19fe664aa95f9cd75211f9d25ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-nufatimant-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61fe24fe7a82c9ffc6028dc001ad6d839eec51a80ab23d18c6ddfb88da0f2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346006a8cbfc7c16b0be7c08985763955d05e0577b1ec34a2831a4083af49517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebaaf02afd0aa3e73bb5115c020b3b4ab603d8aeb116607813bc3a2178bfe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d565bee875091dd9d056054670b1bce3f7e61c8748751c5505c95080973cffcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa80ef6a40614976da4b50bfaabb7dec548dc9988823f578ba446dbd6288db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cdacead516615fcb81516a72715827fdefdc8118a7f1141f496a40dbc8c2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agafkaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea2b534bd3526cb156d117b4043c73f0930a7770d6c324a0e642f42efb3cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e269eb3d9d8d521bf388a767b6f1498473b2545324d1649a5314384c038d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiafala-magollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c09b060291887e8bba65739cff933e2fa1ce90f2e587f69737d8ac0fdf51d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a7aec4895b7b8083429ada0c556c97859a543d53e2431b4ec338a16dfc70c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...