MAL-2025-168069 Malicious code in tealove-aruma15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1e0a02f2dcf311ff592b1bbdde3c2e8769ad944c33a07dc96c3e663f60b7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164004 Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154726 Malicious code in dioalgo-kloip-akagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e09615d51f2245a976f14890a99d0bce8051cf968147e98f1a14d766189bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167488 Malicious code in teagood-nalikami84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8027f47b34e00b17bac44a76c02d2debb90a816f255dcd58d7952214c3a91694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120716

Malicious code in vuetify-loop-convict-run-script npm...

EUVD-2025-122187

Malicious code in scripts-loop-zephyr-lynx npm...

EUVD-2025-111588

Malicious code in loop-hugo-cz-conventional-changelog-markdown npm...

Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-playwright-luna-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122852

Malicious code in react-bootstrap-perseus-loop-octans npm...

EUVD-2025-122031

Malicious code in server-command-lyra-loop npm...

EUVD-2025-122954

Malicious code in query-fornax-loop-lyra npm...

EUVD-2025-122843

Malicious code in readable-element-ui-webdriver-mocha-loop npm...

EUVD-2025-123365

Malicious code in process-mocha-loop-colors npm...

EUVD-2025-113426

Malicious code in framework-middleware-lacerta-loop npm...

EUVD-2025-116385

Malicious code in auth-convict-passport-loop npm...

Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...