Malicious code in isabellawilliams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f84f6aa614a764aea0203a3ce8fe12ea1ca66024e4942a9f35711509446ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anouarfrenchie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c352516f15abf0f4a021f45333805eaff4d2d70787f6b2ee618f11fd5815e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171735 Malicious code in qaisarnasir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d736ec48e500e1587833e8dd958baabc698e49b4da78e956e03db0dbdf341a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171302 Malicious code in hassanlateef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fad048a691b08e91ef14143e81beacb85174be60d91e170a22a7769b0930ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170993 Malicious code in bunneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f410cf1e44627f2fb6b0f011f5a53606b1ef7f92baced72c95ccb4161c444c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170889 Malicious code in anislateef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e0098c1f2634cdf32c349559d2a2e2bf0b9b7457adb98e7a9133fc5f6f3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170695 Malicious code in ahmarfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da28cf513a3b0c10c2d1d6dcb1c5c6ddd990c126443b784dbee4f76e369912f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170811 Malicious code in ameerhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1accebb59298dd06c0228ebd3a69bbb1aae90e06a651fe99f4d6162a84f2ec25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171348 Malicious code in isabellaribeiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8045dbabd9ecc904aef46067e94c668901bc6c75ecf48b36155beccece3c922b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tahirameer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a86f6cb571282950ddc2a77b74a430f53667d8eca87c550e2c793cefeff731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isabellathompson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3e63ed436e3276e1a9208a4f1fe2cece523e2eed8f1d700926ab9318f4feb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170614 Malicious code in aashikapatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c2370f5cf0b235f614f5c67c36ea7a9b030b58184382aed37bdcb9c49f67ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @doelsumbing87/teadoelsumbing87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca8e50630bf9ffbb0a6c0ed80caed1976874766759d86cd8c6a282ab406cdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170930 Malicious code in astronomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caccc8c7dfaa96bb44fb9b85559163d2204c56586e9737944542833519bfc095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171008 Malicious code in celestialcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb755a2c4435124b93181004fdb650812f76baeee6722c38fc87ec1fc00628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170686 Malicious code in ahfazam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc752a767c49d3e504f83f2ba743700f6f7000d20e9fe55c09ece72ee957428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Denial of Service (DoS)

Overview github.com/dvsekhvalnov/jose2go is a Pure Golang GO library for generating, decoding and encrypting JSON Web Tokens. Zero dependency, relies only on standard library. Affected versions of this package are vulnerable to Denial of Service DoS via the processing of crafted JSON Web Encrypti...

Malicious code in nokire-nanali26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9af8aa8860239eea73f6e1e367dcd4739f5d81d25d70c37fdd41e7521ca87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c2e3685fefd83c7080e3c59848c308ffd49abe31fdf50f44327aa5e2b5023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...