MAL-2025-119384 Malicious code in devoted_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bd1457b9198fd9534531af47295178875622f2057395fd5fe6f3c1d30f051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123737 Malicious code in tuti-tempe79-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab131f3e6aa447f5d836c785db1016ec1c63b8b72707e7039b82e4b927033249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120987 Malicious code in jaja-lapis93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c546c7736915bee4d36ffaae0b3e6d537273b2394c05a1cc77ff852edcf8790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121838 Malicious code in mechanical_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5e344b177b46f2d23f1999a1d0545693f7f99bf4f2a67a06f703d69e1dc146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

Malicious code in patria-semur81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1aafff98cbd856f8e0ab35736de98b4e3d1999edcfd21f87e0753a38d46ff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116143 Malicious code in ocha-lapis48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdaf5bfbd4ded2c451bac39d4683eaacf6194b922b09731f636354507827ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118489 Malicious code in zul-dradag47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94772c2fb897847ea42d6813460d56756d5db9b7be546142ecfd0145dbdf055b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-buburayam22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f48a088ca2c5c73bd871373b10bec04e2bc9bb1b1001d9104599b8ee1dc4f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-wajit80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8da48d6ae4ccd941c6a95bda54c722448cf5a4afac6f7e6b762f76fde5cf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293ccf1d341de436a4f8c00b3f3919cd96fc18c3508a7890c89e5227f81fc884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lupis12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcf2d1e2a81bd6ae6131f699de28873a45488d6cc2ebe04aa18c0446a71f471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-esdoger72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe26a8b5de91cda88f0d23ed0f152742f7550b7ca2da0cf319b067a7ce68088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-toge58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09c1be360e6ab51f0b45e0c97005cbef9dda05c87b9b3fc60d7a78c32bafe0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-nasipecel38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a70c6706461525b12bfa3f209bef9c9bfa7affe834bbab1587fd74a0f7e9dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114932 Malicious code in iwan-moci28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f3f1f3199277b8f30684caa7cd5fddd32f1958961aa8c879fbcafb20b12506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116897 Malicious code in rudi-lodeh56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1e8b2ec72b29b35cb554ebfb31e56a00bf82f8b2c11995ca6691104cc24d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118124 Malicious code in xaver-bubur47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bba140500f5d39be3ddc1772ff253c484c2c750b1f6f99e15f05127238105c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114114 Malicious code in galih-dodol58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fb85a83c56072f3613066fa84a465f118ab3a1bf5d4e90840a3e8b68079fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...