MAL-2025-188506 Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shell-omicron-dog-bash-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9773541d5d024eb6ba320252005f48715f06580b91dc6b9da8e16df177b7266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187053 Malicious code in frontend-uninstall-foundation-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a30b58745647f6d8ae54285da6f284047816f0b89c8c04d4a4e632d5b81e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189675 Malicious code in stratigraphy-castor-subduction-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95e074cf44d088a943a7366dcf7a4c1bcf3bd044d9b79a6733eab0a5ec6e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-oberon-spectroscopy-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e7279e1ca549eb0a3e63cb167e9feb16a51f1dedbbf158bf38ddbc2b169e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189044 Malicious code in quick-info-star-new-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8d2af4a7471f80995ba4591bc1d021217434d34977fb94879b5ed115d965a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187719 Malicious code in lacerta-chalk-ini-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cf21208b56ae1d0da3be8ce48b148ac7f6247e8b2ee4ddf53e45b162060b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae35ef0cdb412e48c5e641978ab4e67693914eee7f5d0c188f13b5ed87ad040f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183858 Malicious code in masv-ilisiamo-civuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067637d6fe032b34ec3d509d726c48f179c94dd56febde03344266c93e3d09ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gigimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cfae4fd70ba14e37c26847a3e7ced620dfde85ec4c07b93c808dc0cd9271cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-avg-daigajuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8d9bf88172011d98730eecc58b4fda1a51688622ca3edaffe2b4b62d5472b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182642 Malicious code in imugiay-avg-daiugadajdufij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d99d4e1d71eddebea66b98c5c96698b940e990c10c38e7e8fcb96e154eb72ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

EUVD-2025-134734

Malicious code in anais-papmoa-yama0paiog npm...

EUVD-2025-134517

Malicious code in kisut-afnig-akificfub npm...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180930 Malicious code in teate-thy-sonic-selwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab9c0ad863c7f1263892cb683c7ba2d77239db174d1efe35251c704f9ee259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179744 Malicious code in kiut-acg-avefivubug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8a7ab6f530f7639e392312915106e24d5b8eee01bb599f4a368c5703fde007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63e58fc253242e6c824a582aa92390452236d2194505f57d7687b106a96e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb988625790eedf739a3e3937587e707dfaae22106f2ac778a62d52579a7d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...