MAL-2025-138842 Malicious code in local-aqua-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d45c913bbc73a37fd3cba872c5b0b747074cd3806fb01b2ea687136384857c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138624 Malicious code in communist-purple-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f27177d9140d4433ce03a1e7070d23c9ca65d046bc433adc7b68a2acdbd114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138655 Malicious code in devoted-red-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76490f3e6232a7e0626fdb703b1ff71beb526e993467e889a3401a77831b0db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138650 Malicious code in delicious-lavender-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0131293d35046821d32bd9db2f803ed8970d7205b188041479d1b9b995e7e6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990876 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports...

Malicious code in fajar-lepet22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35297d9b60405be861d4aa75179d93257f020e00874b6c1c30b640a2c61fb2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-keripik50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadbfaf2f09c75119a036ebb25258171da5b8d0c2a0cdc5e7a50a00f0cb87282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendoan82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1008cadf4a59a5dbc1461e99a03cba7515222b59c53c714777dd8723ff31c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-semur56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bfddbe32e36f4b1e750d41fa020f3b601b1c8a700590987231b92945b3d69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lapis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8e6b460b91d751a70065d61cf1279dd03f7e80e174734c5f13376bd95f662a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c7b1964787b4ccde214a668fda33735756b106058be8b3d330168bbe4a59a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-pisang3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0101b4501a7822214fe7e92d5e41dcb887a4d75eebd2ce30e19a39b2d88e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf4548e76985922fca610f303a63cced4b11d10c46c64a1cd97c7ce7bd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tahutek42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f8825e1079569a65c32791dcd942f937dfc1905f0193eb5eedb05cf47a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gaplek15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8019205a8d4d36d70efb94def26a6049c759a8d75a3b05b3d8628cb0c1aced6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9a50e65b361f2e457ef362e7a3aba8acc05a69626ce3bae82020f150b547a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-pisang22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a359eb9434f6595b8e011d52e3d01aac83f1714cca3ff8cbb2015c1d76977eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-nasi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26c781b00a6f14813066e8847887791e3ab9c6b1048aa8da9b919431be49e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a568763097ecd99e6af6f66d237fb5c4882dc22c2bd6c76a12cb66f2fec89000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-teh55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72a4e52ae922e255cc20499901f6be8bfd882c8e95e9a06ed2dd967076a5e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...