MAL-2025-169682 Malicious code in ucok-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc88738077efc20be4c20149e0be9a52e31d74349c8ac93765044ce3533267b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169519 Malicious code in uaragifa-afati-urufuao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a1e619c2797c1bc14b7e3eed3d1a784d1426ae38212485eae59fb367b58fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4df4a5edc09b338cd07a2a42fd30568918b35f1cfd378a8e840677a00907b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169221 Malicious code in trevora-cir28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62935cee95a0ff6ce12917c609505c46504713439627072cf80e4e9a577fe702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165330 Malicious code in sabua-muhay-nyabutua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69b4d5a905c7e34e312daba9e21571080542c9e0532fd2af1679561461ecefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8709a3bcaeff9a2bcbb7468727cfc96376cc9e78bba2cd38f18918b694cd20b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163342 Malicious code in nokire-rara52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6eed7894a717f063ad749c937e52534c8be9b7ef2c956f6cee6e69cd3bd22e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151965 Malicious code in aibopuna-mobile-arnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637eaabd9dcfc7900177b7f477a8e56800637f34d8431db3cec20f6d0ef730f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153578 Malicious code in avomainah-frauu-faqia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2993b31f4cd971d9eec181964a83c68a1fec43a7f1ab7d3a8b0dd0a26f4b7e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166113 Malicious code in slamet-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef5d84e7bed390c5101a890e0769575066abbd0fc1b3cc594f70b89c6f9993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169281 Malicious code in trevora-cir82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c2b41df39ae17e00a34b9ad057cc496f5a91abfe41274415645caf89cfdd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169464 Malicious code in uafaru-tiut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e860b3df0cf13d9e6c80f596f4719cdeac9b5d1e3a176582746e47f6fec73749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64407

Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.

Malicious code in forever-release-it-iota-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef678b480ea8357c3403bc92974a35f3d3162eb978c30eada96539552e2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-hugo-promise-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a25079b613d6030c816cc270a257bdc5bb2c7b5b0b294acc68937fb741bd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-elara-kinetic-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00251c250b3e76556a1a9832ca26172cfce2fd6b2a02f3b8d0b9c8b6994a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140997 Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140195 Malicious code in build-unuk-uglify-js-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b7151233cdb9ba8fac2fc89070d32d847bc28c6e628851f6fa934f6b3ebefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...