Malicious code in alpha-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9758eecca0cf755a3c7cc43115b413dfda31f149bbeed40cdfaeb5e46d739efb The exported getPlugin in index.js issues an HTTPS request to a hardcoded bare-IP endpoint at 46.183.25.232:45000/icons/116 and passes the response...

MAL-2026-12404 Malicious code in npm-module-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8000a7baeda176481fd23b624485b3e419d6bed7f954900229de069c8ec4e026 The default export getPlugin in index.js performs an HTTPS request to the hardcoded bare-IP endpoint https://46.183.25.232:45000/icons/107 and passes...

MAL-2026-5928 Malicious code in chai-test-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1bfd9f5d478d2cc7c947470544e99015a830dd5ecbb7ad8cdb54976c8d6ef chai-test-mocks impersonates the legitimate chai-jest-mocks package replicated README, reused CircleCI/coveralls badges pointing at chai-jest-mocks b...

MAL-2025-188105 Malicious code in module-void-fast-thread-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26e82491011138f549db0c2dc4d0e2c8d67663ea485fd682a4ba8ddd7a2d647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-aquarius-enceladus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63f3f27fbe339dc4251662e7eff0b53ce4ace803ff7b70b213dcab09c3f72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188100 Malicious code in module-fornax-elara-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5fd83f12dfdf42a042b92d48a11b6d2b5328ccfae5ed402dbfb93ba125db69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunsilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca0f85984fe9e20a710ef0cb97c03d4f5b6b74944408bdcac41b4fa07fab2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-sirius-scorpius-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-epimetheus-module-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5beda10712a97e1605af146abe0abe0195f65d2c18776867fc375b4753ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128838 Malicious code in nana-martabak31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c530474a5cf39d27c58da3f5b8fce5e076ce0d2e659e7a0d7138b9b10c6853f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...