MAL-2025-179444 Malicious code in aibola-miloipe-apmamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31aa0c57511a721be0d35f80f362b5865a45371698ec140076164d18617511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180921 Malicious code in teate-thy-sonic-saded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a81735df5599d5d6a5570774d79e19b0d6354ef802655efae0ca35baf918886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180520 Malicious code in teate-thy-sonic-iralu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0165a3b5055f17ebfd3e9e05a0e761c6d85798f751477e87bd3ec31a64f8bde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179425 Malicious code in abyil-nan-lasaihmuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a97b8bddd4ccea2bc5003617ad2cff47caaae86a33958639d201a3f27728278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180961 Malicious code in teate-thy-sonic-tewsor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d5a0181564259139bea2ebd8acd73f20e564ab921f81ff0e8654ad9963c4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179689 Malicious code in kisut-faifg-avuffiguub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cfded8509fd50396aad1a1fd77ca2177eb181eb17a57e92e1195faf957a300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180115 Malicious code in teate-thy-py-uliz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d179733c4ca2755bd1a9ddd4f4c50172ba84c870946bacdaff3dd9bc43b751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180554 Malicious code in teate-thy-sonic-jidat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ca2a52574ab9f8a4cd7f0a9d06dce578ea9fc5dc5b1bb281a78e1a047848e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179688 Malicious code in kisut-faifg-avuffigub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b598b3ed62f53d212984b48fe37500003760b46b396018d6575bfd50d10c30a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181049 Malicious code in teate-thy-sonic-vijwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41039ca0cfd9084686aa15a4fadf75078214a1510031fff2986d909cc9ebd2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180154 Malicious code in teate-thy-sonic-albu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a6c93c379fb110dc762a2570dea9bbf13a5b5c976c66747133d94e8509c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180542 Malicious code in teate-thy-sonic-januk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a2c863ff496e0525a02fd01edb6917b36ecbd2a45eeba6b3f9577bf9e7d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180643 Malicious code in teate-thy-sonic-licbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8b22e8bda18e91bc9fb94faf1fff35f4e5bab97c795a2d3ec42f07921c8585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131938

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...

Malicious code in nuilva-dakdre-aogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7b1e02cf831d9a7a3e6a68ee3f1c874e7ebd6428964eb7ec4dd844a00c8a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6081353c956eeaa99e2be930ba7399cd718abc2d55063aac4070a0dbd337939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-raviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f287a621d3652da96ba813d668e9c31d6667f7d32d0c8f8a2a318f0cc14371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3979c67b83c9c07dbe4325c2d4f563ebf9802ed144180504508a801de85b9b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...