Malicious code in nutritious_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c2f65d56f07f254009ad2fb5272701852ead58862f9500f55845ac079085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc9b07d35be9e56b8dd82c0d4af29f2005bc9124cbd29e8ed183beb8dc4a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b84fdc78bfdf886366812091f1fcfb31d3d28182c1ca2f8a70abf90289b02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98676 Malicious code in different_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e1023f78607f315cfeb524f44d90e92b9704e8e72850a2dffa5e072a8fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98897 Malicious code in rapid_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb539658ec1c51e3b24fef0ec1d824f4963d17cd57834b918b17c45d46857f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98671 Malicious code in defeated_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f460d781d2b88b4f1bf127bf2e5ef5900f18e5ef001936c7b9f34ed60e53e732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98867 Malicious code in peaceful_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ccc2d2e10e9671ba12d656f75cc2c1f5733253b439e9469edf58cf964a3986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98688 Malicious code in due_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033787407d3860b0f87bc1a2352d497a6bf3bc63847863ebacd535fc8d680e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan63-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a997ccac2bbbfd5f6206483cdfd1b64e7cc491d02d25ba1e5900883adf050bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72669

Malicious code in bella-lutis91-pore npm...

Malicious code in wibowo-tongseng60-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41dfe7e4de5327d01237d5e6e13a578615557db6f23e8a4ebcab3edae732ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak69-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a6f809947ba63da36afd6e5cc71136bccbf210a480835762489591e097b02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue9-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a17536218d8c5275dcf1e6e87f21b6399e096e211c0fea734f6f42da63c773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72414

Malicious code in hadianto-getuk67-pore npm...

Malicious code in dono-tiwul45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1048882ed968df52d212d98483579c2781a9239cffe9595d24430872330a8b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-papeda60-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a20c9f6e7f4f53f2266b6d0d6b9eac581d8664d2af2a4a3ef1c4f3121ef281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasi4-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63544d25438207b8fb3027547987efdafaa814942000f9808ff319cae75d6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tek71-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a585e80c486248e91df68483c2b3e736bbaf2cf6a9851f9efecb26d73c20447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-telurtahu66-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e79a5abbbc44191cbbe3c8666ee73cb856dcebfaca45ba52db088226e30ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...