MAL-2025-176396 Malicious code in nokire-kushiya7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136a3af228c4116f8c9ea57925e5109d9ff6eea5a8f1d7b2ec614685e6bf7893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178154 Malicious code in polymera-anasiraia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a1f443e347dc6e9561568198c2d77138684c3c101f8881d625229763f9cc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173020 Malicious code in anita-hadldi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a1e0f63877aed678d331cc3be37ab2edfdff2d6bb85db76a190154858777b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a5861f07673ab68d180a7bd8a640366c646c4e1d24d11b6c05e3c9f7426647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172488 Malicious code in namei-mala-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20887f231554252078f8b94e142aa3ceaa1f6b08c33bcb8ee45e44dced99123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

MAL-2025-172581 Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172475 Malicious code in namei-maila-aiamunubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfb38edb4e2a67e40b3ec430f46c6e71d4a45e4dfd3cdbf79a27930855e85a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fagaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c33f17c17b0375411bf6a61f7c25cf8a195fbaf352edd1408dc1dff071276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20270 more potentially affected by unknown CVE via acertea (1.1.6)

acertea NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

@miftaikyy/tehkontol (1.1.4), abubni-nikamia-luahuubi (1.1.3) +3302 more potentially affected by unknown CVE via tehkontol (1.1.5)

tehkontol NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on tehkontol and may be impacted: - @miftaikyy/tehkontol 1.1.4 - abubni-nikamia-luahuubi 1.1.3 - abulbani-nikamia-luahuubi 1.1.3 - abuni-niaia-luhubi 1.1.3 - abuni-niaia-luhuubi...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a4d67b9c6a540426dba65401a06619ca0724b78d6a1912957eab4f98c1d74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-foa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd6c6171415aa4310283fe96bbfce68d1f8b8019b24b527ff4d10cd332c943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...