Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140219 Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139450 Malicious code in antares-xenos-fornax-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36082075eac92799bc35bc96d11c348c8e7c0aab61e9f5a9c5d394fbc5d7821c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146127 Malicious code in phenomic-cordelia-xerxes-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b67b0a11a65e6ab402390b6bb142f74647371dc0d7415f991c7eba4fb8d444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141121 Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15733-1 weblate-5.14.3-1.1 on GA media

These are all security issues fixed in the weblate-5.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in cindy-martabak48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d2e47543fa9fa140d9a145b40c003d2915d66fa7dc5099b7ba0385374e85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-telur16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d938c99c3ba0673b52e312eca1844545a7cb221ab639198de9fc22e0535d8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc303b8d333e34ccd885c30d22a4f535630b5868e5283132cd28f325e1ea27a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad81f048921fb670bfe9ba735e017914c364e60c436a5f8f0fab8c86c89c6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sambel85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e711902823ad1378bc1d624f72a69b41f7f7b7b464c4feca9d17ce1ce9f1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138241 Malicious code in yanti-lapis98-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da9f87135adaa3c7b3a39cbdc7a61a907ad8845d336005580915eb01c950051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132932 Malicious code in dono-tiwul47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af218d0418312b5cccc23597eb3aeeadf02474e5ade4e2e491cd3e3e7f6c231d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134228 Malicious code in ida-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b69fc7e8db5dee75d27f70850377cbf46c953b847c84d85496fc55a8b7fdf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...