MAL-2025-171094 Malicious code in davidjames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47af7e4649badd8643cd12969ee6bfa52713af97fbfe13a8b2216d8cb72642e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremajg (>=1.1.4, <=1.1.5) potentially affected by unknown CVE via beypremajg (1.1.4)

beypremajg NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on beypremajg and may be impacted: - @abbeey/beypremajg =1.1.4, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170969...

Malicious code in ibrahimnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad47882585945fbb6a01e1eb3fc513fa53b1240c7349a5fcc78f7decd554ba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akifnazir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559a88c3435964de9afe2a17a2ad2dc36e347d7c922fb2c89297cbccd0bd8f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145339

Malicious code in laminebaguette npm...

Malicious code in starryknightmoonlitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b68c637de1ac5c91157d1bc14822962b323ce66a3cb7861a5f758fcecfd179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145233

Malicious code in michaelturner npm...

Malicious code in setiaputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebdfb25a75cc28e822e24ebf9238c350585a29fbf5eb2ec4a098e3bded5cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremtea (1.0.0), beypremtea (1.0.0) potentially affected by unknown CVE via beypremtea (1.1.5)

beypremtea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on beypremtea and may be impacted: - @abbeey/beypremtea 1.0.0 - beypremtea 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170970...

Malicious code in pedromartins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1a221f40eb857b3c559160343fa97adc32a28b9952750fb6d78618a8370dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abukhalid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e513721be6c36fda58901da21dcb861b85f9da5a375f93a42464d3e85d29896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145912

Malicious code in aoifeoconnor npm...

MAL-2025-170782 Malicious code in aldorev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b095a6457ebbd140133effc5517900be075f2686430a3508f15f3440cb81e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171691 Malicious code in omprakashmehta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012af0179b00bc2c1e3fdb2e98612ce0cc4a0f1991ecc19eef6d291b14d95bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171495 Malicious code in lexiokan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef385ec441086a5d8128a2f5dfff48b1fb4945490c275e244d2f00453ad4a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170828 Malicious code in ameliawalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2932c4228a54ea95f784d366bc895fb73a0e88f9e25948782b3e55b9a8dbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171454 Malicious code in khalidbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e004c5cb8b30260ee57bee539fdea33349671bcf78efcd0d9b2758cec0fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171528 Malicious code in lunarpathfinder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18c0e845e73be5ce68cc29739c0c884f26b03a7a4fa6b14441fc5320286188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171223 Malicious code in fionacollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8ee37786f94d96c1ada117bcc7ba76e14ce2a80dc6a78f471d94eeedf312f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...