MAL-2025-141760 Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74de89f741715d26b3fb5345a112775c3f2ffe590c13e624675d8781f49518a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-passport-module-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5741b69073dbce562dc456d306b14a68f27c7c3edea1b1cab27299e4d3b7ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141121 Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd3a1d77cd0b196ec4a386bc4b71b8fbd27406a4eb552e4ba373f7cd79eb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140911 Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15733-1 weblate-5.14.3-1.1 on GA media

These are all security issues fixed in the weblate-5.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in gita-telur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb020c5b7a1e42b51077e2d8dc3527ead9fd7c9755c37a81e6299a191bcdd058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138517 Malicious code in zul-bakwan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a218f0afc9eeedf281e2fa9c064845aba08dfa01e94d970571a2aae8b1bae1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134228 Malicious code in ida-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b69fc7e8db5dee75d27f70850377cbf46c953b847c84d85496fc55a8b7fdf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bd443b274a897d15db51f4489f87bcc395e65e6fbd47517e0da4945a29485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133268 Malicious code in exotic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac672e488b7d6e6e8fd4d376941a0ea58d7b6c5020a4b4d2c3f8ce462c9513c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134754 Malicious code in joni-rojak73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888db2226a88029867d8b2e35505297391b32526118df0960f100275ff4cda53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135011 Malicious code in kurniawan-lutis53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c360ceb246274c913594553aa63eeb1f50e665ae20727735f10a96a28849e0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...