MAL-2025-112832 Malicious code in bayu-ongol-ongol63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40242537d8fa7c93de508b36739207ae357f70d990984ec94d073a9bdd7f3f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113090 Malicious code in cindy-nasipecel56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1c152807c38c19020693efaef4c4ce43843f85d42c47327540a6b582c86fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116184 Malicious code in ogi-mieayam39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39951d9f535bf3dea9ec61eb50955221f61e06ce6842a0049d3e0e5637bf664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117900 Malicious code in vina-kue80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc8f3a62f6158f14c15fa7d3e50bff0155f3eb4891bce5b66387f2cd8d4f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117731 Malicious code in utomo-naget62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb0b69c717d850a0cadbde322bab14d07d448f30816916d2232120677599bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115827 Malicious code in miserable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f34b186798d15ec018b1e6254244a778abf3c0aad6623c54dd03eda7acb97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116840 Malicious code in rina-peyek30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fae8f8e5bd50bf030539abfcb20913360dd83d29d390daa41162063ddfe3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114908 Malicious code in iwan-bubur7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1a002da30e480fb38d5334813d1d31370c377cfe57926ef4535c194156c7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117175 Malicious code in sore_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7472ddf67df2bedb60205200dcadfe2d9a883c31c92e27690e5146c44274dfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118303 Malicious code in yawning_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470c90d5b79a559587a2f7ccbe19bc51a21233b21f3997d04ecb24bb79b928d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gepuk17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aad4a954dd5932224ca8687c34f8b9bac659cb7dbf3adf3dbde63aff121d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118216 Malicious code in yanti-jus13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8d5726df1d4fa063f82f7819a39250dd55c42e6ab041cbd5b5d2cd07238cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117350 Malicious code in tania-mie20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3ac4c23f64ec119c972705d5646f0732cad4299a2d60080164964d719556bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117446 Malicious code in tiara-tapai73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374d02a4d9da37f5e709f2117cdd4089b14d290909b10d00cfe6600c8feccff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

microcode_ctl: From CVEorg collector

New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...

Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_bee_sapphire-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f658b25800eadf90b920958a64ee863a4b5d6a584fb033be800a5f6c28bcfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_slug_orange-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826c861c7d3b49ddac8ff853f6e5ab5ba46f4a5c9b2ef6e47e499b3a9d86e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112061 Malicious code in liberal_takin_indigo-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...