MAL-2025-145569 Malicious code in nodejs-javascript-winston-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08759811e9231c84fe5943c1d82297170a12b450089b82e470c7d2b2d89911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-124237

Malicious code in npm-nodejs-umbriel-buffer npm...

Malicious code in nodejs-dependencies-unuk-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112368

Malicious code in iota-umbra-upgrade-nodejs npm...

MAL-2025-140052 Malicious code in blitz-nodejs-postcss-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124347

Malicious code in nodejs-proxima-link-prettier npm...

EUVD-2025-123785

Malicious code in phenomic-json-nodejs-configstore npm...

Malicious code in cheerful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103138

Malicious code in optimisticcarpz3n npm...

Malicious code in close_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6955629d35c426a0fdaee25339af0cbc2577b6bbd068de90a76214ddb0b115f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131706 Malicious code in zain-lapis65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d7ba7c23ac352f0de3cc9c1c67645105e9fae48151f3fb1fcc1f973e16029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105703

Malicious code in drivingplatypusz3n npm...

EUVD-2025-88652

Malicious code in stripedflyingfishz3n npm...

EUVD-2025-89599

Malicious code in oktafian-rujak95-miaww npm...

EUVD-2025-89505

Malicious code in patria-semur81-miaww npm...

EUVD-2025-87948

Malicious code in vocationalcarpz3n npm...

EUVD-2025-78352

Malicious code in selectiveearwigz3n npm...

Malicious code in joni-ikan3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557978bd63fd5d8d5cc9c53eb5b56259072af203d877d9cf87f88a5f2829c3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...