CVE-2025-13630

Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Malicious code in easy-kernel-deserialize-public-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186271 Malicious code in concurrently-scripts-plutology-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edea377b5bd205b1005922e9bdd267e862f64cc222d1ea9d74a16977f9db72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185923 Malicious code in buffer-package-bionics-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fd405157c2817e145d01f5a76694010a00124749169424ea157e463f04adb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188356 Malicious code in nova-quantum-protractor-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b35d5356afc081638f9e5562655901df31ef1d90eb6c13779454805d9ab8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-query-halley-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110c96b540f872d651ac47fdfce3f49caac30f01ee4f9c559fcf0f20d03f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b7cc53acbbf9353d58fe43267fa8d26ab2870a7144012364a074a478f1a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-putyu-mutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937a6028e14ac1922ec07d83ae89032cf91b68a879678db5e694823c08c6bad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-munavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c105d15eb6de1dcb342e8fffc7c5540dbf67385300f6f62e6e3475e5137defc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179301 Malicious code in unimana-satgub-naiunab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99213f89baf466b89d09bb002fd30e289934ee1653d71d0a8c6e703e5b480c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740de00980313dfe226e197c95b71d7e3e2075680259aa35fb479d385dcd44ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bhavikghosh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a99b1561025e1b0b48c9379b6d4c5fc2fe4a898f8c4d620585453299335b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-iuka1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02120086c1b16d99a4f93e6767b9d1004045d349d28c6482e5ac15335c5dc743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150512 Malicious code in @miptaa02/arhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115fc993f3306cfc668b25aa138c128dcc7202498753b112e37684ce7213f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158554 Malicious code in lookingan-namakiki43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53199bcbf9b6f98e789b65d0d9ac8db7d3fff9257bb3750d6b395bd0bd140ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166500 Malicious code in syahlan-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab135427c07448d1ecf99d45e0e20c52cb1302c7d9f12a06854d6b67296879be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156340 Malicious code in inagi-vuma-nunafubag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849cb13ae5f0410279f313b773b7cca0f1c04db09594cc0d3ce985cea0ae06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagias-infafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e53d3099f8752a8358d9874a01ae9ec0588b36e6cb301a86d92b9126e51fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ifdssy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7582036c6ee99ea5b0b43962e55d9fbed8b1a29d892b9ff1878a510af89944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...