MAL-2025-190534 Malicious code in node-calculator-91aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dcae99bf690d297f693f05f601280424fd2aa253dfc5618eece5c79922ec97 The package node-calculator-91aa was found to contain malicious code...

MAL-2025-190540 Malicious code in node-calculator-c3ef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ec8a1373e5c6acdb6356064e038505a699c6f8c4b377726514e5fc7ccd2335 The package node-calculator-c3ef was found to contain malicious code...

MAL-2025-190533 Malicious code in node-calculator-8b5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad1daf46592af6154c217137abf56491f78677b2d377260ff45b8d694ae78c0 The package node-calculator-8b5f was found to contain malicious code...

EUVD-2025-143309

Malicious code in anidta-hauli-mal npm...

Malicious code in guras-visa-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a85f96788c9cd1764515056fedcd31f19f9aeb9b750bb0edd1264a92d86d088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-mal-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1279b1f74aeb208cf9a16da2282ac8ceea955cbe57c12d3e3a427b5fb324874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155491 Malicious code in guras-visa-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a85f96788c9cd1764515056fedcd31f19f9aeb9b750bb0edd1264a92d86d088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146377

Malicious code in verify-tac-mal npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala39 (1.0.0)

nokire-nakala39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162992...

Malicious code in astia-ala-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f706360039bec7d16f0d06cc9818f2269170aaebcbc4fef79cb9662d1bbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...

MAL-2025-49696 Malicious code in yuni-jengkol41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d225a59ec5331b36685cdd9ece267d512b7af3d90c3869f68fec672027ac93d The package yuni-jengkol41-breki was found to contain malicious code...

MAL-2025-49646 Malicious code in yanti-lapis43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927b3641eca702dafc522d7bdb3d46d43932f68917d3ae64f79edde203a20046 The package yanti-lapis43-ruro was found to contain malicious code...

MAL-2025-49678 Malicious code in yanti-soto97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131b694048afa4206eebbb34a1124ddb1a5873e10943eabd099c1f6c180b354a The package yanti-soto97-ruro was found to contain malicious code...

MAL-2025-49676 Malicious code in yanti-sate13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e7cd51ff1a18124becb92e972bae09f2d50f0fd44afccc53a560c63e043a7b The package yanti-sate13-breki was found to contain malicious code...

MAL-2025-49472 Malicious code in zain-kue29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e129bc1e69e7158e963838bd192a9ed7deb2cdd430fbca807b4f6d9d49e518cb The package zain-kue29-riris was found to contain malicious code...

MAL-2025-49421 Malicious code in lowerx-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fa386b19d15d8a4ede1c588cd50b4feaab4926550cdc32567a37dfea42713 The package lowerx-package2 was found to contain malicious code...

MAL-2025-49443 Malicious code in supervot2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500df927debaaacaa3866b1e58375eb24e09ae13748e7fce5be44c689d656a76 The package supervot2 was found to contain malicious code...

MAL-2025-49295 Malicious code in dx_auth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba4fd977bb9fcc546d31e9a9f84a5339660ae4f841ad226499d9d1e60de893e The package dxauth2app was found to contain malicious code...

MAL-2025-49124 Malicious code in epic-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d1ee5aef53675a9fb367bfbb6e08505b9584394391d2d0c3d6af4529dab29f The package epic-common was found to contain malicious code...