Malicious code in convinced_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3dcc01cde718d0697ab8c9fd3567098f999f89500c2c95a473cf067c4f6c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208abc7fc46e160809791619d67537098d88dbbef1f9e6a2d184c2f33fffc36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60340 Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46521

Malicious code in lutfi-ongol-ongol65-sukiwir npm...

Malicious code in candra-ketan20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28953cb15b3c392aac20316adcd79f6a25682310348015e767eff9680594e31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56483 Malicious code in gita-empal41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956739fd6059d7247dde0c8754a8fa4146c52af471fe30f93e34813df929287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-jengkol69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040ebee30c54362f1d991a20ea4ee406219a1713a10d54bb9ebdae52ffe508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-telur15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb303f55d138688ac41057fab4f8b18c8268c3b6482b1606e0fc8c6ca16684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57082 Malicious code in joko-ubi65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5857148346e1ac4c018b792ba929317d175589da812c827dba76e6b1f6cfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59499 Malicious code in wibowo-kue90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815acbe768fb6dcc21f158a3810f012b5238e4660d8e4918031406b0054f38c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: OSV:GHSA-G4MF-96X5-5M2C...

Malicious code in indah-soto68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d144e7d94a9ca7d18ed779f594c971358dc3d4662030dac2b1714989dc4ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gepuk96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b82203de665555a62377320c883fab7e011827cb704aaefc34338503647a4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f5c1c1aabaf6ca9a7a058aa928ebf58de932a25f194e148878f929ae90f593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54482 Malicious code in qori-klanting23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c37e399aeb07ec0e5a36ad4804c3cfd1fb649d3ba2daf1069c5a8753f167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54032 Malicious code in oktafian-kacang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf91ea204b1ff3fd59ad98e571397c7d33743727be13a67fb61439c5a7b86a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasiuduk14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26f929adf468b0f5595aa2984293b77d44259058c51b679e8bc05a29eee0a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53600 Malicious code in ocha-ketan15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057288518fae5c38e3ebdb6f16f92434b180bbf429c662f38c1bd3cab13da42b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-lepet19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29362e690edadf049901556fd81d29b06ce41042dc64c2d250b2bfdb5dedb4ea The package dono-lepet19-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...