Malicious code in inul-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0b5019a6ad38cec306db035c49b38f4d30db0f9135816a3171528f0c200188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1df2624be20b8ee8126b85c74edb48a22c8b19fe664aa95f9cd75211f9d25ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-wasat-winston-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054d64bfdec4b7199f9f5aae28df4399dbf0746e791e2a667fb447fd6b93d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136925 Malicious code in sinta-bubursumsum25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a35ee131c52b3f06eda25b1079d723a46da541f96b6beb62b709507a0c5b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123398 Malicious code in subtle_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f261a73f7a2b1af60d544b2c677f3ebe90e6ef747a929f893049ca4c9a192a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3da6e16b98f469ec9201042044c09a9150fc09492a16b3baeb0778df5af631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-sate99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083523cbe78965ff9870c532df859d9bc0a709416ff25d23f614c3a96c5a9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-lepet76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e142f6f4bc6b1bbe7357240412648b128c4f26dd2dc06a53a87135bc1af38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2020-15883

A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...