Malicious code in manu-oyi-gigimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cfae4fd70ba14e37c26847a3e7ced620dfde85ec4c07b93c808dc0cd9271cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

MAL-2025-180930 Malicious code in teate-thy-sonic-selwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab9c0ad863c7f1263892cb683c7ba2d77239db174d1efe35251c704f9ee259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179744 Malicious code in kiut-acg-avefivubug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8a7ab6f530f7639e392312915106e24d5b8eee01bb599f4a368c5703fde007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63e58fc253242e6c824a582aa92390452236d2194505f57d7687b106a96e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134734

Malicious code in anais-papmoa-yama0paiog npm...

EUVD-2025-134517

Malicious code in kisut-afnig-akificfub npm...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139727

Malicious code in nokire-tanjiro47 npm...

EUVD-2025-141161

Malicious code in kapo-sadamuda-mimanua npm...

MAL-2025-172890 Malicious code in aneeeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8a3fb8fe85907c7076f2baa1a1486c213103504369fd1949a43872cd06456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172726 Malicious code in affri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66131e784783421656cc31ce8d41a75b1793f763b27b4402d9a0805a9512d0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173562 Malicious code in butanah-fipadsfha-hafuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e41f33560ae9fc53a17900229229fe87796978994b04af4d34530068b0db0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172971 Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173119 Malicious code in budi-kont-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e98aba16161e873d6867f050c544f791d91cf8c2556282e5a910dfd9d93037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173790 Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177747 Malicious code in polymer-agiaga-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295afd1a492b54a4a3262a8f646b4d5190c524c707133cc666318929841494a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb988625790eedf739a3e3937587e707dfaae22106f2ac778a62d52579a7d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagihagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c7cafaa7a85477da9b0e48baab46ff90348024815d00dfe4359a1ad43e8617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179037 Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...