Malicious code in vocal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fe542b13642c9d0b5abc4f9c540419ce00fd51d41c200cbe6d761a69c74cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e9c668401d2447f078702fa506904180d0cbf0f4580111493e755d0323029d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60344 Malicious code in effective_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9066d5362b52363cfa655d83fa44ec28dd67ddb9e51435e3b6b3547468ce6903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58483 Malicious code in rina-lontong40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d853ca8a3a6fdd9ab442e70f8d610c0694c6066bb8085bbc43eb22e1a14440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tiwul91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef51be499b234be4c3a68bd662421e72f45914153972435422a0fae82f3238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-oncom40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1a790665d68fa05ceaa58d1427af866b754ec071e577a92928d4c730928da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lapis50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05572699f75466f4dd4e8bc58c4878ca88d89b8c86f909d9d1d13d428de1b795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2428447445ac1b51642eca62df9bc195d367eb5cd9b5beca9244ba13a47eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59661 Malicious code in yanti-saguer40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9bccfa36dd1a66d8f8d7f58ef9126483136ad485a954d2ba82986e1867f258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58988 Malicious code in tomi-semur93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a78f048ec10f407c9f7a4514c1d6f1519a78841ddaeea3d7a8ecbc603c8b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-bika87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2019b9136918310ddef2bdc00c5d3a3284775dc787641c9d1f3d436b0569c686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasisayur18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bde3165a0438083c9790270c2525a5562cff3a4d7e6642f6f73bbfb88f84e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44866

Malicious code in umi-kripik69-sukiwir npm...

Malicious code in fadhil-pecel67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766740f62b7ece6b8ed1b74e84e5104462b7fa2b1d739db70a34d5dd279db0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57129 Malicious code in kiki-empal87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b255dc19f15d79e4a3b3611c133d24cf90241fa66cd521bca1a53e73c4dacd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57270 Malicious code in kurniawan-naget27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61971ff3f4609a01e4864558c4215b8186767640706b3144f66abda7b95a4465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53773 Malicious code in iwan-mendoan56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3233aca0cfc334d60fbbd5bfe2770248bead0e4c154ad606679a42c13a8cb140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-jus81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595def466efd3b73bbb82088f6ec9608b6f69fc6e4262e57a4a6700225cc719e The package zul-jus81-sluey was found to contain malicious code...

MAL-2025-49040 Malicious code in simple-import-sort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5caceb82a60c3342bf66bc4d6a60a268d94712079783637e89a40b6f374122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48989 Malicious code in bernie-plugin-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...