MAL-2025-55175 Malicious code in andi-dodol47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a2b03c883273ee6c688bdbf0f67220e073c601e102dcdda79edf7deb6ae8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56529 Malicious code in gita-ragi63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7fb56bf72e3025081f8a82251b5b5743fea1204b8c3ea8abedae99d0530e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a614b4325a2d2ff27eeeca123c4d38f940b1bf44353ff5ab43b99ffe081af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca862eeff239a5010a3d1c99cd34f7b890f4e01dcaf5316fbd955111364717ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56877 Malicious code in irma-ketoprak11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c0576a00686f8650cb8270ba5d085f9e13a7c7d8feca3a8a474cf3df74bdcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58291 Malicious code in putri-peyek83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aee5c68464ce2e0f74e2c99ce9cf5a297a6f2e3a149610911f664e3432b6ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57705 Malicious code in nadia-buburayam39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4052a171e34f6758e6b5661c2022a1028cafeacbe3ebf80703556ef4a746dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58531 Malicious code in rudi-gudeg82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cc1d20d2fe7b5b43b59f5e204cf60fda0574f83fade04bc5b564e9c75aa453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56119 Malicious code in erwin-gudeg24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44764ff6d2bc356402b7df538ba173bf23b01457a15c9261afa99be7c39609d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56532 Malicious code in gita-rawon20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5f6dcc433c4e261985882b269057f3e633de16bc5bfc810923d83b70cc8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56009 Malicious code in eko-bubursumsum89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0d657b8cb67ffffeb2faee26b570ae5f4048d922b0a1924835be31ca3e0c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56227 Malicious code in fadhil-semur28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f78170d9f7d63e9c85971a989bbdf6ab3c77796dea8af53924e69b2bd67953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-52662

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...

Malicious code in oktafian-sambel86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e864fd399d9be040c4c7f5d869e1c73c63ebd1864e364942eff6b729f6274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-takokak60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e392b08324751d5a820671b82b281adb01de4fb8a44bca250e31448510bf99bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sambel16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443be676cd4019f47c3050dfb259e35d9b5cff2b232f33659bc2e2606c1825ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55002 Malicious code in surya-rojak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b72a63cd5567231f9fa7f9a834cb173b4de956e675cfab3a2f41cf924e9a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53868 Malicious code in ogi-lupis47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e38807b8d70d071de316b787c7654bfb386a8ba0b8a234c5b077a02a62da198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54228 Malicious code in putra-lapis70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679e21a6cb0987a8ce15d496134be175e2c8755264eccfb4b326bed9a3cfab99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54109 Malicious code in patria-gepuk4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198afe463a264128d133c8bca73a875d7b03abb75cbd10ccf1333650451c69bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...