MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140911 Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141121 Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15733-1 weblate-5.14.3-1.1 on GA media

These are all security issues fixed in the weblate-5.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in tiara-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bd443b274a897d15db51f4489f87bcc395e65e6fbd47517e0da4945a29485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-telur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb020c5b7a1e42b51077e2d8dc3527ead9fd7c9755c37a81e6299a191bcdd058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134228 Malicious code in ida-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b69fc7e8db5dee75d27f70850377cbf46c953b847c84d85496fc55a8b7fdf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133268 Malicious code in exotic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac672e488b7d6e6e8fd4d376941a0ea58d7b6c5020a4b4d2c3f8ce462c9513c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135011 Malicious code in kurniawan-lutis53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c360ceb246274c913594553aa63eeb1f50e665ae20727735f10a96a28849e0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134754 Malicious code in joni-rojak73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888db2226a88029867d8b2e35505297391b32526118df0960f100275ff4cda53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138517 Malicious code in zul-bakwan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a218f0afc9eeedf281e2fa9c064845aba08dfa01e94d970571a2aae8b1bae1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bubursumsum2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8873c59ecb3b95119164a1536265962f4e1d32461f70561157b0c3c730b0ebd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad81f048921fb670bfe9ba735e017914c364e60c436a5f8f0fab8c86c89c6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-martabak48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d2e47543fa9fa140d9a145b40c003d2915d66fa7dc5099b7ba0385374e85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137206 Malicious code in tania-kue28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde26bb47bc51b758e4119af2b3f92a863d1f46d32daadc8a604db4645bd2f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134232 Malicious code in ida-lupis57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebb3a7da6c66f28578f30922a33347d98759b6f5a7e9a7b27172dfbb2ec45d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136784 Malicious code in rudi-nasi69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7bbd12b8d4a16b7aeb338f8f8352de116ab8c05b3c2c9a5827892dfeb2cf33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...