MAL-2025-114422 Malicious code in hadi-martabak53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bace5396ec718f4db35db3a5588f3988299fd9637bcbac4bada1dff2e2314c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112759 Malicious code in awful_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d16c3af792d24677873c7147dbd6acc1eb8ce0569cc5bf29e8b72e2accdd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114908 Malicious code in iwan-bubur7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1a002da30e480fb38d5334813d1d31370c377cfe57926ef4535c194156c7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116187 Malicious code in ogi-miebogor15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d32f0bf8e6722fa955c730c5d6613b34e3fa372eb3064af51bb682b882182b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112896 Malicious code in bewildered_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40e27f172e0cf9692ee9f182db990dced6da3d29dcff25a5c9308f811729cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113305 Malicious code in dewanto-gorengan22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3b58d902fa245126438d4513370b2ea5e4b5016d61a4769a4e42668eab76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114816 Malicious code in insufficient_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a433ecc7d8a6798cd48724ca7a8615426c482de3fea6ecf8c482983c7c259b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116912 Malicious code in rudi-pecel37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2f630c1ef4cd40a44cbab875686a6a0a24c5cf77d0db449ccf9e5cd7a2032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117623 Malicious code in umi-jamblang55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3186415288295973810de4b931c4eb6ad6f738cc07951862b8e0aba2981fbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113087 Malicious code in cindy-moci66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7901e2e85f55e38b4cbd3c624d77647259f20191a603ba1a1d974ed9b5db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118226 Malicious code in yanti-kripik89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434a7b4446302d6fd82365eb668cbdeab3b5de9509f7e3312107f66c948e33a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118216 Malicious code in yanti-jus13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8d5726df1d4fa063f82f7819a39250dd55c42e6ab041cbd5b5d2cd07238cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118328 Malicious code in yuni-kripik3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80484cb6e750cbbdfe8fe016fbbb724e01b4b15cd52557ca124950118185b574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117406 Malicious code in tiara-buburayam100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a08ff287548c31d999177751f1772a2200e205e458c6357efa0dc3de4a820ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117246 Malicious code in sufficient_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ba4d30b4c65f1af5cffa718fbdfbee5ed655166c5bee933c87dc6b1f92bed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

Malicious code in eerie_snake_brown-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323ed24d23b218d3f0e311d99dc4dbfbd4a0d64bbe6f7c1866033e0b06aabe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_slug_orange-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826c861c7d3b49ddac8ff853f6e5ab5ba46f4a5c9b2ef6e47e499b3a9d86e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_pinniped_ivory-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b3cf44c0283fbae1345353a9266a91199527545c9ba3a35e2e1469aa9f35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_squirrel_olive-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e95dfac9e1c303bbad2947faf75fcc099761b66d70f93780fb7c02a97af9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...