MAL-2025-57892 Malicious code in nurul-papeda75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392d8bd82c464b802c15c1d2d1e11ba4927fba73674b0e595fef85845ea9ea03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59223 Malicious code in vera-donat86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c711b75e6cb338fadf6cdfbf62e04e87d909caf6a3486595c2e8ae681da673fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57317 Malicious code in laila-tahu81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d7d5487b25cf5734d6c71afa399d6dd647ec8e466ed13af6acf473a64aadc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55137 Malicious code in agus-nasipecel97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29da55ed2b5c696ffe720fb1c44aaa5a6a57b4f032c542c6b80cb00bd1b50ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59352 Malicious code in vina-ronde46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f89a0325dcf6792552bfce869d957a825710d7011cf4aaaa9e5a21a1f8e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tahutek36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc66d45b9fff53a604cfc0b773183cca4571131be1a43d1692c20a752dd050f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53765 Malicious code in iwan-kue96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44985c3b3d09c85f6b90fa5d70317f6b291ef903389876643d3c27920577f496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gepuk43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d961ffd0fdd0819dbdebb2ca5c4a651e9e1257055b2bbd21eadc1cb4e42dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52934 Malicious code in ida-gudeg66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bd1f47644988f7e516af861658b24b5ab2f073db6628c4599d7a34a6c62cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50288 Malicious code in eka-soto21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1336690738e542e7e1f95545d3ece7dca526f7e3ae70e484f0e7aa409618c10 The package eka-soto21-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Malicious code in bella-tongseng34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20bb51d56b3e519bf7debe7c3327c800c75a2c110899196eb7d7d9bf3ba1689 The package bella-tongseng34-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51425 Malicious code in citra-martabak8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b382d7f55cdfd68f07a6ee9c673d7a16ca7c53ab33223a3481e34a398563a24 The package citra-martabak8-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50528 Malicious code in tiara-lutis80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61da0fe200b58c8d646d037620bc8de8d9846d4941f0ecadebc42f9c2d08886e The package tiara-lutis80-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50539 Malicious code in tomi-kemplang11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdbba96fc15c42582479f44967422fa66d702f4047afcab52b95b796b34a4d0 The package tomi-kemplang11-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50467 Malicious code in galih-sroto22-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9a8fb37598923a6a8687802286f7f7dfc93a9650a3a217b1c52877767763df The package galih-sroto22-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52517 Malicious code in udin-ikan84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66ea5b79f8d1976ea498ec73e16859462b26f36aad34c2479c89a341c359044 The package udin-ikan84-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in @chatclub/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48779 Malicious code in tailwind-config-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09d3964a8d2d069f80eb368ccd713c6c2347bdd6790589bc55a96f726904eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47240 Malicious code in @hestjs/cqrs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c115992eefc51ff69abc88f9b1b99c8934c1d03e4a724bdb430fa22e942a45ab Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @teselagen/ove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c137afc6d3e31e5f4509c510c57e859b10399e8b246cd19aed5188a55f59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...