MAL-2025-150688 Malicious code in @miptaa02/gfosd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865245e08ef95c42fd4b6349f36cf1e659691a3ffb1b9aca3d02d3f19da70dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170419 Malicious code in verify-ayisali-gfanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5285a05c3993338b3dbd5be1d5b3583b1fa37d36cbd0d3727dab677673ab5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158143 Malicious code in lina-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29efba35411847b75a22908f62fe5e94844ad84c845964e5f21415ccb6ee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159279 Malicious code in man-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63246ddcdb49f3d790708ef98c75f8b2f5c8b425127551a31faecf69a8d3f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163794 Malicious code in nudela-ofgaf-gafjaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de19fced31d8aeff4175171fcfadf8e9738d52f22af0cd68b018a5d00592ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156902 Malicious code in irashi-se-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a75dea3452b14ce5f252a5623b7422d0f398b3e7658dda1cb4bb95a5a772f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168138 Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-4890

creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...

Malicious code in lint-perseus-betelgeuse-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fa8f8962f849977da38989af1f68903aba39062e31527b08d77f2cbadcec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-apollo-remark-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ceeabb85389e3b45f969cde72ca79241252f1cf6315d2f730f5367e54ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143971 Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142665 Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139534 Malicious code in aquarius-epimetheus-mensa-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3ec09e7c79d82ae5f01e76fc90355ccd58308c893d2f7f8371ae20821c32c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146486 Malicious code in prettier-plugin-markdown-indus-wasat-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f05a1808f8706ac243238666ec94a2d41548943a8cb519f9bf6475a331efbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46717

Name of the Vulnerable Software and Affected Versions DinukaNavaratna Dee Store version 1.0 Description A flaw exists in DinukaNavaratna Dee Store version 1.0 that can lead to missing authorization due to manipulation. The issue is present in an unknown function and can be exploited remotely. The...

Malicious code in candra-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da477a8a52c32375ec2b58c11d47e8605ef7f5402e7fb4f445c24d2d3850a39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-mie41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a309d3f544f6b513e7c810e94b1ae330f394f072395639ff46969fd1ee7a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d552e1c3c28ef52cc2746782daa27b32baf2037da5968250618373301e68f5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54584a2e5a8724007bf56aa31ca33c5caaf6835c82df85b12a6d40036821eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...