Malicious code in lutfi-donat40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4f1dec48caceeafb362a7329daf5139c94934e2ba73e5d61fe0ba1583869ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-wajit37-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b46db4042cbf5ebe7a525a8ead6708f9ec43e935af55568d218f2dadbb7c8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx_brown-29-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e1871cd02e5e32bdb198d3f2358585fc5b40fa0549bd21fd2e8627002e7e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quail_amethyst-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981a8d274454d54b2649bfa2689fc22423f2f19ffd9428204eaf38ac201e266d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brengkes72-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f693abce46d921e75066c1e9f4bfe711b4c8cf232447272d1bda11c95748f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cod_red-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801c1064935fdcdf38e8f67f798039c6e3505e5447bc493bf0876f5867f078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-nasiuduk54-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51baaacf3e8d597340051d15aae859f6a2537de5cba361038f8a98165de678bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-menjes91-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4389b60aab4714c4c1407d4ee99484f73c6f4c5200d7c96b51747ab0a9fe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lengko42-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0839e126506cf56b3708369cd12266ab248949da34912890dcd4c1363a39089e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

MAL-2025-98479 Malicious code in verbal_yellow_wildcat-32-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c37954c845b2128189409c5d3c1338500f8a61d5a78e86ee64b5266d9a67fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98518 Malicious code in xaver-bubur82-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c48a47e0af24b5f388e9dcc108d94f4b072bda0d47ca66957d59ab60c3d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c10c4290384696c5778d93e83efb71313dbb9fdb751f3d212ec2eb8829d109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63293

Malicious code in linearocelotz3n npm...

Malicious code in slow_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aaab0353a991b511fbbccba02672cedb4a75697566298a9248f626cf42a884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6989af0d9fa3d95bf68de217d2305f10906c63771f043e2033f8384ee03e216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7572c4df0849ff724fd575e25f6962759865b2f81c9d2421d5e975703b581b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73705

Malicious code in silentantelopez3n npm...

Malicious code in defensive_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc034d664a622e250eac8dd26710f79a10eb4dbc00069b9105cc98fb6a650675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc366f01b826f29ab6c212e70f0ae3aed75d7494efbbf41622d445a3f950d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...