Malicious code in nurul-tongseng6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3584b3f649c0d6b5cbc4c79d814590bd3c4a1ffded7f7c0fc115283810d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10005ea196af514d346fc6b00614c19cb9b7780f04c7c63f029abd47e247b174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123567 Malicious code in thoughtless_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22127dab63bde890c2dafe5087afe735b93bcb908e4a9517d243b7d54dda5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121097 Malicious code in joko-nasipecel57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75558dc7e86071674d9dab0a3e0b609305138720d3dbbd6cbae81b7cbe036fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

Malicious code in erwin-mendoan73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac510cd3ecf9e10b80607c8780d66d2658eb550eba5a858ceb36039f894d1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690a8c27e93ba4662df702dbf1aa3b0fca3bf90afef900f7fc04aec8d903f5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gandul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5421f55e84cf010810f07b448a60a96759b9522736b191854e0f8e0074fd9232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lutis74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dff842ea342746bffb9080c9de17aaa926eff4369ce7d348cc432eadd5c93bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115120 Malicious code in joni-papeda80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aec72a7b6e8a4bab8220aaabfd543a6fa12c9ec872b04113b6ea250aad1607c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sasag83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ab8762cee06946b52f681abf3984b7651585fb436343539df140303dfe1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117284 Malicious code in surya-miebogor61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5654f33c3851409f27eef5d37f6020704754f221fa0325a5fad2a9431313495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lutis8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf5d3bd157499137a278d7fbf193fa92b9437cd49c4896a7e4f1079dce4195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-rujaksoto28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad35920f2357ddc167917226a6811df59149f0a2be609d3d286e9083ab0f909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90152

Malicious code in maman-sambel5-miaww npm...

MAL-2025-115473 Malicious code in lina-otak-otak67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4386be76b699745885483a92086d245a4850a1bffcee24b70a761611db0dc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113509 Malicious code in eka-botok35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b382c17673ae46fe0682cfbe4d1488662df5f0f48d6fbea908468a41ac1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115150 Malicious code in kiki-klipo93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82e9341956c7d9b0458ebd4f7ab5842be947e4a73afd4bc626be2cb0e5d88cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117945 Malicious code in warm_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7afb72e9f16e4445d37638d1fb8de77bdb7663af8c33d324003b27f8a45398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116211 Malicious code in ogi-telur47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f0a4a6e3cda1fb9f3abd150b11845e1dd0516d6cb9a00ce18cc89e2d303301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...