251 matches found
MAL-2025-168191 Malicious code in tealove-coki34 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-158612 Malicious code in lookingan-namakiki96 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e7d47409b62247d78f793f648d3ee82fe605505106c197be0441d3485d712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155895 Malicious code in ican-poke18 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4024c214a4ff6174ec326b9e703a89672105c0388941c6ae52c46bc4987c09b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150900 Malicious code in @miptaa02/rassasdzdy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-168934 Malicious code in tehaah-codfd-mut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170228 Malicious code in uyifa-iaydut-daina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e437da5295e91300b0f084b7e78b334dc3d20ca6816b0f51adc4550d80ddc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164271 Malicious code in piluvaka-kaiuablbu-nunubai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18700f1db2e3534b2be7afbb74913753f127f553c4ef772e0dac7208a464339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152957 Malicious code in astia-alabokio-moikaif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d308aa2f67c9baf0c60728f369b77d4d3bdb03734e61e4504de19438397747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153653 Malicious code in banuni-otaima-ufua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca0c63aba15c7652ed71423d4dfa78d22fd03900cb5e2030f2248e37c360d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170173 Malicious code in uyafaru-tauimat-dtut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a54da88919ea5c3cecddc6d600ff9851d0bc84b71676c47fc55be6192e7de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rocket-eclipse-stop-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4def9ff97a89fd4b0585a7027ccf43a81f2a3715dbcea1118fc5360345d78d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in neptune-version-eris-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145124 Malicious code in mongodb-cz-conventional-changelog-ora-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb147bfe801c54e943c3b384907f9f9185d5f7082e95835e37acd74d015cfb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146268 Malicious code in pipe-rehype-browserify-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callisto-jsonp-avior-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121572
Malicious code in subscription-delphinus-grunt-nightwatch npm...
Malicious code in forever-fornax-nuxtjs-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3541086eebbe70f6232c01542c1c747f33ef2d0a56945e336d6ea43c232df603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...