Malicious code in gita-lapis83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeef7454f903df0568af48985fdf0450d5b031b607d8d07e2cfb50bbd78354d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kembang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58698e0f46c75270506b936d8be9b398e7fbf2c58efe269a6660e09b1408b8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134631 Malicious code in joko-lepet72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab1c24630f66a10eb15b0b052d39b14e13df9b045b6788ef66e4d6fe6d3b240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-62780

changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in versions prior to 0.50.34 due to insufficient security checks. Two scenarios are possible. In the first, an attacker can insert a new watch...

EUVD-2025-103991

Malicious code in lutfi-tomat15-riris npm...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100219

Malicious code in cooperativeearthwormz3n npm...

Malicious code in equal_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9e43de418f9273f8be1908158ec4dcc1939e22569ebfbb682184828304fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97473

Malicious code in knownmandrillz3n npm...

Malicious code in patria-tahutek7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ceec550527ba9eaa6bbee77c363f6c8ef1a1db536d67545a84bc8f3c62c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-brongkos65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d7354ad0cb613be0dc3cab77d9cdfa32ccf381794e6eba832f3b0ae35b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97541

Malicious code in joyouscheetahz3n npm...

EUVD-2025-103392

Malicious code in objectivebovidz3n npm...

EUVD-2025-104160

Malicious code in lina-semur45-riris npm...

MAL-2025-126905 Malicious code in gita-serabi31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398a24405dcea736cadb13157dc02ecadd18dd345467bde2c4914d1042061240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131183831aeb5e3a3f256422bc62f2f8ed8a54c53200aad63b982020b643335a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106219

Malicious code in cici-lumpur37-breki npm...

EUVD-2025-105590

Malicious code in eko-rojak2-breki npm...

EUVD-2025-106350

Malicious code in blondemeerkatz3n npm...

EUVD-2025-105252

Malicious code in finalshrimpz3n npm...