MAL-2025-169900 Malicious code in uinsu-losit-bisaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51216b2089fe1cca454329753476cff1ed0a6369485353a441bfa38f8f079f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora: Security Advisory (FEDORA-2025-671d7aa1ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in hadi-kentang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ed60237081f036a1453bae437f4d62edce1463e2122caed412f5979e9366e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ruwet12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac5f94775edb1c794eaf2282bbc6bf6a3133f157a35ee376baa66babc6208f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135297 Malicious code in lutfi-kembang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52cd9ea56ed4af6d6c06cca7fe607a40231f9511ae31503a6c365363dfcd677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134389 Malicious code in irma-brongkos31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e0f75b0d8e2daac39aeab0493b6247cd5e949b74d065f8b972304a5d68a88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137884 Malicious code in vulnerable_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7726097f92b95a394e21c334f12e7eaed89a17ad3cc8d1a66b153dd4ac2a493f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119064 Malicious code in cheerful_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e253fc341bbe4b95dbb296a74d1125d7a10c09b498d17e2451bf2dd893b593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b2a3912c53fde8c2c0475e45ace7144f17c40e05435e1c27fdcf8e5209125e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-bakwan25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f49dfca7abc5dd94c6867aa0575a88aa995c9bee75d781210e7d9c168269a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93086 Malicious code in abundant_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252ac5a5e25e3f470cd9d0632452f297256e0ad8d5b6f05488c1c2f8730e9201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rujaksoto41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c092e2ef5fbfcddaa262ce0d75418e8e0a09c8526a29ba9f8e26e66fcec5564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80583 Malicious code in patria-gulai88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a839a8962637803c97ea0d3d0bb1cf78cb50cabdd7b47a4513c20aea54fb290c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80111 Malicious code in nadia-gembus92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afe78774e81489c7d6413181fe8166b8858fc5e5ed5529f7dfff5632c152d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1915ec43353a078057d15bb5c6b3de4e1d92f4175255bc26643530f6fa997e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-jade-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df08c5a6310ebc1dc1fc88ff782a730a7113a0fd8b9118299af594c8773de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68866 Malicious code in individual-aquamarine-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0d6f611f831170a473f4c9af646d6a790ef683217ee2e24f85cfda770a41a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...