Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37e2797f20831765f7802ef1ff9ae52570b476efafeac4cc55ebea8556d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152501 Malicious code in alvira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f050c863503d6c55b869ad4d9e8d12b40bb0259076398191d5c38b49feb6c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48098f2a7998a3aa7c3171502e952bd0a81c80aa3e90b671778097e850c01b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156254 Malicious code in ilang-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae69094bb1e53fb2135a30ec5fccec7641c0eca21f6095e92e18b9e9b880c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1a863d6f0638ca62efa765355bfdd7e9139bc40b7f411125cf07a0f029915f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157542 Malicious code in kentung-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9d390ad1631b0cf4a510555fbf671d3f747e761ae0b441296417f725585f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153711 Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156309 Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155609 Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152421 Malicious code in alvino-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594bbc4fb6894f768da794e478a190cdfbdd078ac821261272e2def5cdba07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152861 Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164933 Malicious code in rita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f6570a31deeb737eb876f461437818788d2cc79a134663436d0016c5e14037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170572 Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 跨站请求伪造漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A cross-site request forgery vulnerability exists in Enalean Tuleap Community Edition and...

EUVD-2025-74114

Malicious code in uptightiguanasalmon-6 npm...

EUVD-2025-74117

Malicious code in upperswanlavender-6 npm...

Malicious code in upper_swan_lavender-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ff7f6811d5bf6551a1ef1f500a4b50df653845ef0c8827e2ad160932e2af51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74911

Malicious code in accusedcrocodileturquoise-6 npm...

EUVD-2025-74843

Malicious code in bumpyxerinaecyan-6 npm...