Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-passport-module-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5741b69073dbce562dc456d306b14a68f27c7c3edea1b1cab27299e4d3b7ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a60f7cc7b169f8e1232d7a749adc3157ac3942569c9f447ff02e1dc726b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-changelog-xenos-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86aca0815621f69cf5d331bc8091efad1fcdce25c829787fc1a4df33c99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145448 Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146127 Malicious code in phenomic-cordelia-xerxes-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b67b0a11a65e6ab402390b6bb142f74647371dc0d7415f991c7eba4fb8d444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142015 Malicious code in eleventy-websockets-restart-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7742050dee45cea14cff82fe189f760d1c4c45aeae6ce69e717956ca60dbd543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15733-1 weblate-5.14.3-1.1 on GA media

These are all security issues fixed in the weblate-5.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in tiara-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bd443b274a897d15db51f4489f87bcc395e65e6fbd47517e0da4945a29485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-getas44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0319cb761dead005792bdc52f0378034a91eb2aa07958dc7913bdd8c345f4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-telur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb020c5b7a1e42b51077e2d8dc3527ead9fd7c9755c37a81e6299a191bcdd058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sambel85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e711902823ad1378bc1d624f72a69b41f7f7b7b464c4feca9d17ce1ce9f1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-lontong41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62327971ffe11b84792ddf9a09c2510991ba551b5372c4adb726b1ad98404e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132184 Malicious code in bambang-sambel4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff81353cf6e8810414c9af11a434ce536cb1fdb8dc314342622da9160d564f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135011 Malicious code in kurniawan-lutis53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c360ceb246274c913594553aa63eeb1f50e665ae20727735f10a96a28849e0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134228 Malicious code in ida-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b69fc7e8db5dee75d27f70850377cbf46c953b847c84d85496fc55a8b7fdf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sroto76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3729d811aa11b15200c8bae859f69b066b38eeee188fd29ce0a8af8fc70d9a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138241 Malicious code in yanti-lapis98-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da9f87135adaa3c7b3a39cbdc7a61a907ad8845d336005580915eb01c950051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...