MAL-2025-190547 Malicious code in node-calculator-x7k9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61652e0e15358217e6b9754390cba499bb2411fe1815da0ff1f39f5fde071478 The package node-calculator-x7k9 was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-x7k9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61652e0e15358217e6b9754390cba499bb2411fe1815da0ff1f39f5fde071478 The package node-calculator-x7k9 was found to contain malicious code. Source: ghsa-malware...

Malicious code in bitsight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899 The package bitsight was found to contain malicious code...

MAL-2025-190492 Malicious code in worldskills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ace818f9e6d4526355bd80129354c139dd0b991e6df6ee6211df41110352 The package worldskills was found to contain malicious code...

MAL-2025-190490 Malicious code in bitsight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899 The package bitsight was found to contain malicious code...

Malicious code in worldskills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245ace818f9e6d4526355bd80129354c139dd0b991e6df6ee6211df41110352 The package worldskills was found to contain malicious code...

Malicious code in enum-report-char-rho-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe47f9adba20f092284e704a6a5619427390e0fff83d48dab8122cbd9ecac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187335 Malicious code in hercules-deimos-superagent-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d98d6bdee6ef3106d12f87df57e1e2b9c3528bfbddfd348a03903227af37f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-selenium-oortcloud-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9c392f64679172f81a2fc6e79ccf979dfbf3879ed0696eb339f8e1a4219167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compile-validate-sandbox-node-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc4473c74d323ab1478cebfa6f67c5738a3dc065c1c5261534dc58cc730cb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitouko-on-lakoik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0921edaca69d1f0782e2c02410f57cf1ab59683e9cf2d3b7801f320e23b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitk-oni-lapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442cf9b9d9819fd1b22746e0deb7967eaf955d6fce7845db2fd1fc8295204f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f63358138fef49fc0efee7a663967c40680ea7cfcea40180405afe9991a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185339 Malicious code in unise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3410b120e2ae4965125c564ee09b3d36062988c478d1de2bdffc4d4b7d4d1722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183008 Malicious code in itale-dci-rfsrgget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f45d70193b40ea108ab268cf1c51a7b22ec4ba83cbc25eeaa244a8358683117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2994e50808305049a3ed4646e9b50d3633e7a856598ada14ed9983d993d858c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179697 Malicious code in kisut-faig-afigufib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ced33b129de727bd99ab4dc09e5860392cbed7fca0cfe8e325a29bf6810ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-iani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76df5a3172e2793a2d19a197b1423ce0e2e9aa78514830a693f517aa8e5b5654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65151300a586714948b439bcd15c5bd934a4ec8c82fefd1e471e5c7c8e7bb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yug-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d611ed6e620e0d6ec5df092d31171a1ebd1f7cae506b24bcfacf87cdadfcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...