Malicious code in nafeesashraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f315f0294a2750acd2e3af3c6e7713a2baf23f98da0cb50ab7bfe4e76f3519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afdalhameed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff70a755655e9bc81075c4aa93de35490007cf3d7bf3cc45ba38c55e26c68570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liamharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b0634e67537851e0b5bfc87bcdf62a535276f97e768a969a67abf8ff39027e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aryoputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3cb1bf8aea6269a543cd5070acd2dc771732df92006de0f0b2c321f00d8e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in felipelima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281e58f58cc4d5ba9afed94f5b8f46e7f762e6209523b4d09ba043669117b9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@doelsumbing87/teadoelsumbing87 (1.0.0) potentially affected by unknown CVE via teadoelsumbing87 (1.0.0)

teadoelsumbing87 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on teadoelsumbing87 and may be impacted: - @doelsumbing87/teadoelsumbing87 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171954...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170764 Malicious code in akifhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d458a99843c1e030c50b1640c6aa3f64db7eb0158c0652a7f3a1b5d073afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171082 Malicious code in danilosouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054588e6656f1565167f1361a5d30eb656976cde448466b45de8564ca8eef3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171520 Malicious code in lucaswalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f367123cf0a254536dd6ba4ef7edb45f85ade6a062784af8d7e2b3caf978c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171273 Malicious code in gracehill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b9285d10d8708c8b2099c698f1f5b125dfe7d5d0fd3eb74caa92082f34a958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171537 Malicious code in majedmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60c480b444091015f1554c9a9e1bec148f6a9eee75621963f65e2fc86b7c1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171999 Malicious code in williammiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26920a36655dafd3fbdb2eb6787ab235c9c9d827bf04514ea7d906b33ba3b4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171274 Malicious code in graceroberts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50728a0ee70bb0b35da4d90d3b91e73d20bd0478c730282724a488f0b2c6f50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171319 Malicious code in ibrahimameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41acc4d96fba5aca2df90c5698f57ccbf3d5d06b3fc00836f6a9727af1e5ade7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171725 Malicious code in planetwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eb14d1efb74998460662c6119c4dc4d5efdfe19d18c9c89478c6a4f7c86446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171716 Malicious code in paulocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc89ffabc253abce5b383433fd6d61a366f90477a4796100b6cbff2e2c57d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171094 Malicious code in davidjames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47af7e4649badd8643cd12969ee6bfa52713af97fbfe13a8b2216d8cb72642e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...