Malicious code in wati-klanting13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e9f6e3b00ad08548753112a3e8a4532290cddb7e8f018fa02044ee2e0c0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-sasag50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781b76b24ff62829c1f1296ad8f3105b2397af9065be7e7d624453763281fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75826 Malicious code in udin-oncom55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd88179c2bb5d20b61021f07b6b7833a351cdf640640bbd989668018593fe974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-blue-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d830524db344940c9233c32ac1272f7f897963e49d6da3f0b4ef6a7081ec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70192 Malicious code in raspy-coffee-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474096b32aa3c1aedeea59447b0e1b3919008eef97e74dfd4815e30e5e594f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic-gray-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c78fbf4ca73d27ebcc920d9666942e4b8f2d7f8dfd4e5200332e7d8038a1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67188 Malicious code in chubby-gold-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838c66da69ef99a58498d05586bad8f14e700e1198178a722875144040f81d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66643 Malicious code in additional-orange-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20412ac8b48c05ef485d7d12ee5e870cedced47b4e14a6f36aa0b48210eb3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-turquoise-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d44d75e834ee50fb61fd467a3ac5fa3cfe9da26f1d1fde2261751e04305cba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-indigo-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7774fa1b7e5fc023a88be7bd0d1899731f3661ef466cded25ab8d6b1ba1a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-ubi90-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3064ca41d4c4e2865dc4c3bd46f0054d370cbe379bd3386cf1edec638d1e8726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9797cd4c8c0d73e7bf7da9d47859d20b65eca0b87641227a78b9826c2dda3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1a87c7b78dcdd32241d3e92959c989920a3e8d63be022f0eb5b51d5ed43394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63585 Malicious code in iwan-ketoprak89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670c973c801756ab01abe1cbff5a1ecb3cfb3293da9b2cafdd86f53c1db8c226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61836 Malicious code in agus-sate86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c36751f81783d79a4d684bc60b0e769abe86543489ed869de6df14de38b6c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-46559

Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description The rust rewrite of sudo contains a new issue allowing authentication bypass. This does not affect users utilizing nanos unikernels. Recommendations At the moment, there is no information about ...

Malicious code in welcome_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae74aa5c5696ebcdb05b64375037f29c18b13c965d917e92ae4e8126e876981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kupang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5b3558d4fbbd4aa111c5722f37c8f35091b0f32c1a9310c69f7c16db9e2809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56792 Malicious code in ida-takokak79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318a072919cd858b2826e59ca05ff317bd496aa414070fd22c64e552b3cad51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...