MAL-2025-177151 Malicious code in nuyar-dad-rd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941f2c4a6396814d79d42a05f5a4d2e0ed3b9ba20965a103f5b8634c5b8b0ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175612 Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175441 Malicious code in kapvino-sovni-farsacvamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f1f3c55ab141607db8ce00d1cc4ecb921ed90ebe2a33b4055cd22799cf5f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178800 Malicious code in tanura-sui-dafuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf53cf6d4f9aeb63b3cc7271fe219b212aaa603bb38c8326cfa19bda900e12a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a5861f07673ab68d180a7bd8a640366c646c4e1d24d11b6c05e3c9f7426647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172475 Malicious code in namei-maila-aiamunubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfb38edb4e2a67e40b3ec430f46c6e71d4a45e4dfd3cdbf79a27930855e85a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-mafodfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5166450f59a28c40264c420bba5d07e1899a7a08020c3ac07b5e93fd136fbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144383

Malicious code in heres-matiula-umanuiada npm...

MAL-2025-172581 Malicious code in verts-otimo-nafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5146fc91236c12af5e60b3d841ebe7ba0c604b243f712dd7d6969849326f16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172488 Malicious code in namei-mala-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20887f231554252078f8b94e142aa3ceaa1f6b08c33bcb8ee45e44dced99123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fagaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c33f17c17b0375411bf6a61f7c25cf8a195fbaf352edd1408dc1dff071276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@miftaikyy/tehkontol (1.1.4), abubni-nikamia-luahuubi (1.1.3) +3302 more potentially affected by unknown CVE via tehkontol (1.1.5)

tehkontol NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on tehkontol and may be impacted: - @miftaikyy/tehkontol 1.1.4 - abubni-nikamia-luahuubi 1.1.3 - abulbani-nikamia-luahuubi 1.1.3 - abuni-niaia-luhubi 1.1.3 - abuni-niaia-luhuubi...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20270 more potentially affected by unknown CVE via acertea (1.1.6)

acertea NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a4d67b9c6a540426dba65401a06619ca0724b78d6a1912957eab4f98c1d74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839b42aad14a45984b80d029a4ef1e19d6c03d456b81cd035fb8441ad6716cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-foa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd6c6171415aa4310283fe96bbfce68d1f8b8019b24b527ff4d10cd332c943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...