MAL-2025-164912 Malicious code in rita-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7746a0de99b7352bd68d9965ec846e1a092681252177e492559b9f6dd3c37a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158536 Malicious code in lookingan-namakiki27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0a7902465cb6437ae617356095fa92e701e7c0e4a4d7d727ffb567409b30d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152882 Malicious code in aril-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6377e1794c1849fa8628890544c68baf073bbe45a7235bb73cff0b0fd2dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160725 Malicious code in modirai-imgono-jinamug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e78773a4386a86d307266a4acc5cd93a1695f92acea8eb4b2c2ee42884e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159882 Malicious code in mansila-toaviabpla-madolioibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a491ddfc0e6eed0c18bb05873104482333b4ab1ac87b11d8da0ab6c747a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159726 Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152684 Malicious code in angin-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c719300e2f1e229f8f46c6e907f1338524cee7359155e0a312f50c418c26c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164376 Malicious code in poliaoz-aikk-alini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bf874421d4d49e57f032a7fd1b268c18bf9dcd64c83371cc05b66ced13a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168081 Malicious code in tealove-aruma26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5d3c40bca817cad29b66e5e87c9b12516131f1e183f6572e0ec0fa6b33612a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150231 Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157131 Malicious code in jurss-a1rea-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd07db606223407df84b520328abf15563c909bf949d831d573b526c91a32e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166209 Malicious code in suharta-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc3047d9391fb02bf9e44d81980dce6e3bf9dbd099b306bfad16c7b97c5f221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11565

CVE-2025-11565 affects Schneider Electric PowerChute Serial Shutdown. A path traversal (CWE-22) vulnerability could allow a Web Admin on the local network to tamper with the POST /REST/UpdateJRE payload, potentially causing elevated system access. The issue is tied to improper limitation of a pat...

MAL-2025-140126 Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-testcafe-leda-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e7dc9ba0f5d47e98f774ea7995d2500ce1213a9d66d48a42b8ca8ae7391b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-zephyr-pegasus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97815fdda06e8a45bd8006981b533a5d6463aa60146347ccc5c014096f451520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-slidev-json-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab7ee1097a7df9774ba57469dd259df17b9e9111d9a59f5f924b99d6102dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...