MAL-2025-178254 Malicious code in rintono-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1db80ee19e06a367ce2627eb7f580b5586d2a1a7ff28a82a0383746291ce1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173263 Malicious code in buis-sunina-mubanava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1c719f5671c73d88f9724a855f0e802363d82c1c9df1869f122c3a2a59ee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174805 Malicious code in hunim-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0abe6ca3c4c472f145b7fa827d094dc1a90e001cd2a1f89aac951a41b443b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172688 Malicious code in abdiii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7100656a30c383e8ee6775e8a8daa77372f27e22f52a5b9e8481b54a357ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173492 Malicious code in buta-fs0boiuna-gaaioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9dde825cd7c597c4bccc84b778d9f97ac8e0b1b9fcab7b7bbb7364af5f024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175865 Malicious code in lia-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c0b0d46a61247cac165bf4e5b069ed94e46b04fa51f92b6f538cecbde1a2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175628 Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175447 Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178068 Malicious code in polymer-ids-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6f1114754248aac2b78282269500c2132fc98895c5bef352570059419ef3f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176588 Malicious code in nuilva-avm-rucasivasv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2dfeae5d9812a272117c1e717225a8620b43f7aa05e94e6cd9e50f1ba4ed07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178056 Malicious code in polymer-idasifovagfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4581f9f03aac1cd7a9fcaf9b74dcffdaf1b399274346f21a419e66ff6fb5335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173421 Malicious code in buta-fioana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce44c125f2b1b673e1750ab63ee5ffa15deaaa5b8e4e0447c330023f9f089dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177792 Malicious code in polymer-arash-millio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f838470e7c6e82a8b18dc6854bab4416b79a81276510daa30309062538d145a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177857 Malicious code in polymer-avof-ahafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e24fe6c90dd3b2ee421ec3312d245de05bcc141c8260301681960f1099d6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174554 Malicious code in haritono-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ecb1296ef2ea83f548d479c58d0bc2df1ecefe888e0e81780f35cad71db5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177818 Malicious code in polymer-avoadfifa-abohdoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3385df91a1f3a34b519da69d30012a3d8cd0c4ca6749b5a51244e9e123665fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176871 Malicious code in nuilva-vmiam-rbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e6ac2e88af9d360c884b30a022c28539fd411bdcb65edd462b5e24697a536a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178067 Malicious code in polymer-ids-raaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dde2f7f00e67c97e0c0b7ae04f326a4f5f45c0e1bb1b0e552bcf78bc21f325e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174444 Malicious code in goodain-nusafa-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aade912c227aeb1107b24adb6a4e6f214155c9461d40b1c382c97f8371243b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131934

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...