MAL-2025-138927 Malicious code in partial-amber-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20d0bea390ab7a9fb8919b90cba55961516d597386ccd345a5602a6e423a5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

sudo-rs -- Partial password reveal when password timeout occurs

Trifecta Tech Foundation reports: When typing partial passwords but not pressing return for a long time, a password timeout can occur. When this happens, the keys pressed are replayed onto the console...

EUVD-2025-103109

Malicious code in partialcicadaz3n npm...

Malicious code in partial_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeb9ac49e156bd0c0cabec3e756a7efab446a9cea9166290c3896a4a4cfdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103107

Malicious code in partialhippopotamusz3n npm...

EUVD-2025-103105

Malicious code in partialoctopusz3n npm...

[SECURITY] [DSA 6052-1] rust-sudo-rs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6052-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2025 https://www.debian.org/security/faq -...

Malicious code in partial_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19407ce8db6232ab8663e24c638a7f3707b12dd2f254da277d05d46d9ebb556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_mule_harlequin-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca353e7f1dbdd908f1e46488fdd0316315f4f4c5c00e1980280522cbb7d8de81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74377

Malicious code in partialmuleharlequin-65 npm...

EUVD-2025-76060

Malicious code in partialxerinae-notthedev npm...

Malicious code in partial_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4291a0986dbc3f5d19a1a3df19b53b6350be8e6b0acc30f0a542f7684543d3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_marmoset_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e3258e3041dd49d4c50ee28b3bf4358f3fec6c0620174c88c010cf8121834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80983

Malicious code in partialmarmosetreplicateautomation npm...

EUVD-2025-62710

Malicious code in partialanglerfishz3n npm...

EUVD-2025-62708

Malicious code in partialmuskoxz3n npm...

Malicious code in partial_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddf5e4561903e9c4e38f8b641d879d4bc46d59dfc88e660f7c71cd9d157d8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89358 Malicious code in partial_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddf5e4561903e9c4e38f8b641d879d4bc46d59dfc88e660f7c71cd9d157d8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bb6bdc6871d1bc279c399332b5b48a20a2530e4b0fab2d10030f2fbaa11696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622a5c6f93e51302adab158a5a675a3fee75404142d4345e934557e337a762cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...