MAL-2025-171094 Malicious code in davidjames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47af7e4649badd8643cd12969ee6bfa52713af97fbfe13a8b2216d8cb72642e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170636 Malicious code in abdushakur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71a0a163dbd43a9ac97d804b8e61c4f81f827076a3bc8bdc03096f0e49e73a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145912

Malicious code in aoifeoconnor npm...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremajg (>=1.1.4, <=1.1.5) potentially affected by unknown CVE via beypremajg (1.1.4)

beypremajg NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on beypremajg and may be impacted: - @abbeey/beypremajg =1.1.4, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170969...

Malicious code in pedromartins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1a221f40eb857b3c559160343fa97adc32a28b9952750fb6d78618a8370dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in starryknightmoonlitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b68c637de1ac5c91157d1bc14822962b323ce66a3cb7861a5f758fcecfd179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145233

Malicious code in michaelturner npm...

Malicious code in ibrahimnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad47882585945fbb6a01e1eb3fc513fa53b1240c7349a5fcc78f7decd554ba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akifnazir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559a88c3435964de9afe2a17a2ad2dc36e347d7c922fb2c89297cbccd0bd8f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in setiaputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebdfb25a75cc28e822e24ebf9238c350585a29fbf5eb2ec4a098e3bded5cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145339

Malicious code in laminebaguette npm...

MAL-2025-170828 Malicious code in ameliawalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2932c4228a54ea95f784d366bc895fb73a0e88f9e25948782b3e55b9a8dbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171223 Malicious code in fionacollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8ee37786f94d96c1ada117bcc7ba76e14ce2a80dc6a78f471d94eeedf312f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171101 Malicious code in defihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e082ac685c247533937b64102b8c1b32a79d0eafb23f8aa7128d56418c170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abukhalid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e513721be6c36fda58901da21dcb861b85f9da5a375f93a42464d3e85d29896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171495 Malicious code in lexiokan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef385ec441086a5d8128a2f5dfff48b1fb4945490c275e244d2f00453ad4a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172014 Malicious code in yasirahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4548154a7b2f065d683fa0b046d028496816113328942b3dc2349b26e9d21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171648 Malicious code in neulneul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473718ab50f971d9e1f8c184c6e2ecb6a58dd97e74aba0ebfe0774c27dfbfdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171454 Malicious code in khalidbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e004c5cb8b30260ee57bee539fdea33349671bcf78efcd0d9b2758cec0fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...