MAL-2025-187757 Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd4cc234946d71734de7de7817ebbddc0fcd172fe575711ce6c995c421ce51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706f8fbf56a490cd42d5ff7839a82ed9b0a848532c712909ed4a2d6d64c54cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119145 Malicious code in cindy-nasi15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0348dc897dc53e933ce972ad805a9de27bcaf966c3e5c27f79ad90f6a95255fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113127 Malicious code in citra-mendoan56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f91690383dd53de2bfe63213a502dc361d5ca7997db1c2f8c0a5020a9873969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108210 Malicious code in round_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61f39f2b29cc07efac32344b2f8d82b6cac63f1a93f1eb56edaa4e073098c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100431 Malicious code in cici-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e207c121f842f2395438aa161fa8d95c5b233783db106735d99603a2341dfb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109849 Malicious code in troubled_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33b2778a80a6e45f35483b4a5b2e9337e6f03cafd06512e6a20900525998341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lapis11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34aea631f29831e09831f3411b7045aacfe4b99d408a76f74a56dd3548510934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81108 Malicious code in rina-sambalado20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fb99878f6c7418a6bdb2113db9480c5adbf20fb11fb7c57be86a381111c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54602 Malicious code in rifqi-donat9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1173485fdaea9bddb3291e9168c3bde9c42b5299d1bdd836784ce1f02fd6a4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51384 Malicious code in cindy-sate73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89af57ec701014a17291cd40eac5f8d28cade96243c70a96c8e745618fca693 The package cindy-sate73-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Jenkins Plugin CloudBees CD Backlinking Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...