44032 matches found
MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in verts-otimn-foa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd6c6171415aa4310283fe96bbfce68d1f8b8019b24b527ff4d10cd332c943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in verts-otimmo-ffigggafog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in augis-pod9r-guled (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839b42aad14a45984b80d029a4ef1e19d6c03d456b81cd035fb8441ad6716cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hereis-mala-ta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecc0de75b05c69afac5be2513674be7c4eb458d69459590549a1b6eefc4b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
siddheshtea (1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (1.0.0)
@miftaikyy/depentts NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...
MAL-2025-172211 Malicious code in augis-pod9r-muail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42175bfdd83e898b1f3c3a0d56d16d16989239416620ccd2e4df759968270ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172537 Malicious code in verts-otimmo-fa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365d13677892f914f249d5c1ef2013d39204fe53fb0f84ee3e64557707caf74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172385 Malicious code in hereis-manic-tauwar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af99ad6185d0de0a27b0d8951845a59c004f7e29b7c2ce694edd9f516775af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172617 Malicious code in verts-otio-nai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae9db81e67ac96a20c6b26749c782c73680853776ce6175ccce8b05c9e2d66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-172491 Malicious code in namei-mla-abunubuiau (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c715bf67d8c4af083c124f69f0b9ece2c1bcd7a8967a4a7b15d5086526ce5dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-146161
Malicious code in aburahman npm...
Malicious code in oliviapage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d822efba0e66d25df0772c673ccfa23714f94d82fb301445aa9f32d24c6f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in seanreilly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f380d67268f5d6f31e5750842ad999fba00a1478a5127181f4350653a981fc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jacobgreen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7d5074e498a6fb979f6e51b7205d8ba21b0e932eaa0f6b444b2396c0320052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in maevekelly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376373d830b5b9c73f83e3fc78016edcc3c8c40456c4c8426452dc89a5af5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in akifnaseem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21476b4696a8a5ad817398926f49d70cc7638a75f0627e3c218cc8c502095634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in batagor-kering (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900f16ef2a1087150396bbddb887d787b5a745b22b20563fb55bd43c6fdb21e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
@fahmisugeng13/tea_fahmisugeng13 (1.1.4) potentially affected by unknown CVE via tea_fahmisugeng13 (1.1.4)
teafahmisugeng13 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teafahmisugeng13 and may be impacted: - @fahmisugeng13/teafahmisugeng13 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171951...