Malicious code in lazy_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a92e1aebe06bbee00a6d598f92ba2dc7f6f953f9ff1a8ea4acb1ad33519bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57934 Malicious code in ocha-keripik72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e1b72ee564c4d54d2b325eb0eb7b74556065e6a47d51cbff729323a3f81ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56992 Malicious code in jaja-sroto92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a1c409baaca90f88fc8e76b0562182b16dfc9a2bdf5ac2a14df69f8fdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bika75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1ae7dd0b5fa8aa437cd64c170f2d92ccd9ce267d189b5704420374bc412a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57220 Malicious code in kurnia-gaplek28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b877d15351e20166409c8d899e71f25f00e4cf67d591e478ba8ce0f46e3213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sambel43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d3e16cd1e8d58db474dd0d20f8a9b2eb2e69549c503e6499a24395ded29ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54930 Malicious code in siska-rojak16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544400c991577e9a92f0d7d72337e176e93e803eb87f7cb77aab510fc03c0d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kue15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16770dd6e24c35def1f83d21db3873ed2a3bbabf33930e0574b0d5c69d2b566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tapai69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f660fcf6201d787365c6d34ce6cc531c32a68b0f2a1b6f78d21ed83c350e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-moci15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c284da4395ec0612633c3a81e9027ac879129b4fb84f33a5c5430cd280aff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53078 Malicious code in joni-tomat56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1ec4780e483f2dfd95b9a066a75a2a5c6eb57b247a51f5126950edf5091655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-serimuka83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b52fc037341fba2e106bc920ed34c2a6e6614ac273d1f4f5250fae4df4ede78 The package citra-serimuka83-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in mbed-js-ble (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cbc9bfb6de04bcef9b700b14e7b05e13889f71d3fd11d9ba0281cc76d95f39 The package mbed-js-ble was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49314 Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

Malicious code in fec-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...

Malicious code in stark-recurser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54520ff73a8cd962cb9ab3db426b6c93987e6b616edf752e0e5f6f346293af1b The package stark-recurser was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in geopost-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57d3bad54c135655781ae00e108e90ad9a31f6eaa11327df5d4654a411f0d7 The package geopost-web-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48947 Malicious code in geopost-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57d3bad54c135655781ae00e108e90ad9a31f6eaa11327df5d4654a411f0d7 The package geopost-web-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48949 Malicious code in test771 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39742384f3c2564e0528b3d94dc6b6cd66170e96d6a2818289c862bef030f39b The package test771 was found to contain malicious code. Source: ossf-package-analysis fbdb37fb2238599fb921d6fd14a8d65fdc19f6196377b91e304da671021e41...

Malicious code in gear-bridge-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e84b9a555df93618c5127eddd0b90f79c79e8b54a5c60a0deb241487f867d7 The OpenSSF Package Analysis project identified 'gear-bridge-common' @ 1337.1.0 npm as malicious. It is considered malicious because: - The...