MAL-2025-104184 Malicious code in influential_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393222c20669351df989c4ddfde564f76322b8c28285e7549dbcfe583b2ab83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101795 Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_pigeon_turquoise-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34508951d2e0a3a5ae6576703acbd9210cbca204764d4128a2d39673ab6b9051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111025 Malicious code in worthwhile_lion_pink-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd09a0b2ba8945013f3acd25a891695c7a1f7832dc50a8a29b6fe5f745df1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa4c8c1c75fbb6d78b6ff36ebe3d330ae03debc4978f8639cfb7c99a5d3c9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59d53f9cc32c19c6fc0506faf401540efe863ede262a6d12211b50bcb8d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ffc51b174685a969f386fe655b83a6c6edbeafbf5a9864cea18e1a0c51563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652e75a3f527e46e53acc6825770cfdf69176a2995462d7f61fbd9b487f993b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110433 Malicious code in verbal_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676184774de5ba23e281ce1b8af43d5bd0a1230ffae05bef7c42982e4f6548c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56abe4159a2fd04588990b79fc04a17c238814c0e6a301ca1dcf66e6db000899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107993 Malicious code in retired_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76552ca8255a9f5f8110a67f9abd0a83d22fa6de8c1ccccc9e43c08a4352af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fef6d3a8f01380f642caebb6bbaf41c17e0f631a72640ed3cafe0ccff2b57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1c10dc7070119eb8feb08d174527c157ef63f835e9f36ada146d97ae0e6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b20de3589448feeef3812a44d102579c272e5de560d9a3ed88062f3d075e569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-8998

CVE-2025-8998 affects Axis OS (edge devices) and is triggered by uploading files with a specific name into a temporary directory. The underlying effect is process crashes, reducing availability, and exploitation requires authentication with an operator- or administrator-privileged service account...

Malicious code in distinguished_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3e50915928355da5fa448dee604568fb7288dfea6357d51854b3374191712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leonard-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb713cd309b4b195cfafa00ae65a902bdd6bd675acf42926670488fac317d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a768d8a69f3128bb33de1757a26c2b6bf13bd56419a89e300131d257a948439b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100750 Malicious code in compatible_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f334c993295638990261ce9a71b25caeec1bbad780b9cfe0873688978a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100596 Malicious code in clever_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc546d16d5b81dfe5b5e25aee56a0786b30fdd9821813dae59d51207da0bc114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...