MAL-2025-172537 Malicious code in verts-otimmo-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365d13677892f914f249d5c1ef2013d39204fe53fb0f84ee3e64557707caf74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-mala-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecc0de75b05c69afac5be2513674be7c4eb458d69459590549a1b6eefc4b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (1.0.0)

@miftaikyy/depentts NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...

MAL-2025-172211 Malicious code in augis-pod9r-muail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42175bfdd83e898b1f3c3a0d56d16d16989239416620ccd2e4df759968270ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172434 Malicious code in heres-matiula-unuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b430cba67c480d2feb42bbd483d48a62efe5bf1a3741aa3f861fc1c7897b941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172385 Malicious code in hereis-manic-tauwar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af99ad6185d0de0a27b0d8951845a59c004f7e29b7c2ce694edd9f516775af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172185 Malicious code in augis-lepaod-matanidap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a5426525d5c65662e56a82b6c0fe824bcc59b565247a110c0deca8f853291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172617 Malicious code in verts-otio-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae9db81e67ac96a20c6b26749c782c73680853776ce6175ccce8b05c9e2d66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172491 Malicious code in namei-mla-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c715bf67d8c4af083c124f69f0b9ece2c1bcd7a8967a4a7b15d5086526ce5dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146161

Malicious code in aburahman npm...

Malicious code in oliviapage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d822efba0e66d25df0772c673ccfa23714f94d82fb301445aa9f32d24c6f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seanreilly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f380d67268f5d6f31e5750842ad999fba00a1478a5127181f4350653a981fc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5641a6031a337547aee17d7159959b994fb2aba9d152a8362efdd84fe316951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@fahmisugeng13/tea_fahmisugeng13 (1.1.4) potentially affected by unknown CVE via tea_fahmisugeng13 (1.1.4)

teafahmisugeng13 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teafahmisugeng13 and may be impacted: - @fahmisugeng13/teafahmisugeng13 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171951...

EUVD-2025-145032

Malicious code in rimaputri npm...

Malicious code in solarscribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f07caa06740b3bbe400697c486ce33466b7ea8a3af2bd7e220d5ace167a486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in batagor-kering (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900f16ef2a1087150396bbddb887d787b5a745b22b20563fb55bd43c6fdb21e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171054 Malicious code in cometobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b79c8e800013aa7b525f860206de1b4134ffbbf91e03ca2f85669f14f9915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akifnaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21476b4696a8a5ad817398926f49d70cc7638a75f0627e3c218cc8c502095634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...