CVE-2026-49261

Disclaimer: This data contains information about vulnerable...

Malicious code in deploy-good-data-double-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f539fb8f3d51fa364bbc575962a64190641a7845e4ad288836f916b9fe9df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lepton-weywot-mira-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6f9d66b6ec16e62056ff7cfe9f1e3211bb59ec315c9861d4881df2c50af75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186925 Malicious code in export-zero-orchestrate-zero-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af09b797e4f7aae7c05dba3d89244c143d4393bfb4489b7d6453160dc763868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186711 Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e053063556b6ad51aaa35357c867ca4d8fbfbd2c51ef10bbd60a53ea1b3916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188541 Malicious code in palynology-isostasy-protractor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3677114d3794d21b85f9a96da8349a3359349ad35b6401c29589feab1f24a9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187455 Malicious code in index-wind-info-emulate-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c7bc730d75017275a5990844599417b63dfb9b803b4e2864818d175504e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186848 Malicious code in eslint-plugin-pyxis-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf79a19acb73dbbede82dbfef01183fef070d4bb00c153e59937a9e5a306132d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183717 Malicious code in manu-oib-givakisassuisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6bd5bbde0113cf42fb9268e6ff879734ebc4e9da3b086a1e75f9bce486d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184653 Malicious code in odasv-kuu-bofaufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763fb2c7bf112c16f7b2c8c23e58c991283f08b0f9c7ee83565624b669c80943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonyunaymhedti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38c13338fded806acd0d9e38e13050405a242271c145977cc3b8798539fa412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-don-oliksima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d143737a294dd27bad8cb7779a6788e941c8e753a4138d2b71efddd6c0f2d235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oi-gisiasyvaugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d44573571405d7d56e34bc037eefca95ea244a75a8f1b4e934ee611279747f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182608 Malicious code in imugiay-ajvg-dnieamnfaupa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b93999b4fee9a350d349f3be5416709e6fcabfe9fd43c4002a43980f3f1dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hilkun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dc3a2da760e1eb84e65abfeb71c00cf3e756fdb7e5b12697598b2753066d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180192 Malicious code in teate-thy-sonic-belweh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c932be15e58388243d62806fe0f5ce1973d6385679c6c5c61b991e950f30dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-apite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f40e756f16b7d507f8c5fc5de46016340bb7db0ae8a86fc0d069424b99df3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imiaibuafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1f73427a2e43715e41c8f3f34d98a994e5f3046c60b9efb84926bb89c71a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...