MAL-2025-101291 Malicious code in deliberate_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972401650a112cd9784c349052b926154b29de4cd150b6a0d16229512a07c5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98383 Malicious code in takin_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65be342df0535520e911051ad1239bf313231fed198c8925c4f64d031316371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96203 Malicious code in ready_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8363af78542b31e20725daded819ff101e166ba16429e36fc1cb3c8ec1a3c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85611

Malicious code in ida-keraktelor75-miaww npm...

MAL-2025-67392 Malicious code in concrete-ivory-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95180632e1172fd78c5b8da08621e886d94da9d4fc860dcee48fb17e93052d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64885 Malicious code in putri-gandul89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b4da0758a376362e7ede22377309bb46777ace96978de25a7105061149620c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44373

Malicious code in yanti-esdoger89-sukiwir npm...

MAL-2025-58380 Malicious code in riana-bubur76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f6ca124001d1f62894ba9c9951dfafaf426dc39ef3d06aba33db6d98bc78a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37300

Malicious code in @alexandrsarioglo/npm-ghost-htb npm...

MAL-2025-47421 Malicious code in @strong-energetic/test-banned-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security beb2182dad9121d8cdfbd98f321d90cd62cda75f2c4ef68f1a5e22608808dc91 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...

MAL-2025-45975 Malicious code in savanna-yucca-ovl568-project (npm)

The package savanna-yucca-ovl568-project was found to contain malicious code...

MAL-2025-35619 Malicious code in test-mlw2-kilim-preed-attic-bully (npm)

The package test-mlw2-kilim-preed-attic-bully was found to contain malicious code...

MAL-2025-40714 Malicious code in zain-kemplang76-breki (npm)

The package zain-kemplang76-breki was found to contain malicious code...

MAL-2025-36690 Malicious code in test-mlw2-zoons-picky (npm)

The package test-mlw2-zoons-picky was found to contain malicious code...

MAL-2025-37150 Malicious code in tranquil-vgsk6-mexpa-willow-project (npm)

The package tranquil-vgsk6-mexpa-willow-project was found to contain malicious code...

MAL-2025-7071 Malicious code in @amber-team/sellerly-theme (npm)

The package @amber-team/sellerly-theme was found to contain malicious code...

MAL-2025-38816 Malicious code in waterfall-iceberg-ixu008-project (npm)

The package waterfall-iceberg-ixu008-project was found to contain malicious code...

MAL-2025-8255 Malicious code in @landmineaknpm2/facere-voluptatum-a (npm)

The package @landmineaknpm2/facere-voluptatum-a was found to contain malicious code...

MAL-2025-38347 Malicious code in vida-kacang89-sukiwir (npm)

The package vida-kacang89-sukiwir was found to contain malicious code...

MAL-2025-7503 Malicious code in @crabas0npm/quo-quasi-neque (npm)

The package @crabas0npm/quo-quasi-neque was found to contain malicious code...