MAL-2025-98336 Malicious code in sari-sego46-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0a11362c103513a3bbe8ce82c504d48b6b603f1222f9672df102b9e6647b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98519 Malicious code in xaver-gaplek54-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54f63386221c27c2824c00f40b2cd6733649aaa4f9f70151b27046010570ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97588 Malicious code in arif-kolak70-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cccf4223d3493dffadbf4c5505364e6de3f5c29ad9f5ab86a6d202d34c221c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98507 Malicious code in wibowo-ketan79-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812c069cf72049970dad13e7bf9a8ac4e9afca59c1b5378f518782e05cae6668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97903 Malicious code in hendra-tahu59-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f085f26746ab6991dc033128cc89a644b154b5f62df5449d3ffe1881406f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97595 Malicious code in babayo-appdevv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf7c39cb0012bfa45baaba6c39fa13c08e2c8ba5d6f379a037b3c42d1d3744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98487 Malicious code in vida-serimuka52-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280b3bb64a9e062157eda2aae438d8de99e70d559b51568dde785e1fe2ef465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irulkontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331238d72b4557d652fbc935d2e61c10c2a92a6f0c107ad2a6b10692df276aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-donat40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4f1dec48caceeafb362a7329daf5139c94934e2ba73e5d61fe0ba1583869ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-wajit37-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b46db4042cbf5ebe7a525a8ead6708f9ec43e935af55568d218f2dadbb7c8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quail_amethyst-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981a8d274454d54b2649bfa2689fc22423f2f19ffd9428204eaf38ac201e266d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpion_emerald-62-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdcad2de53da52ffb3b004842798053cc55437aee0af439c26f087f1e6c557c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx_brown-29-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e1871cd02e5e32bdb198d3f2358585fc5b40fa0549bd21fd2e8627002e7e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cod_red-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801c1064935fdcdf38e8f67f798039c6e3505e5447bc493bf0876f5867f078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-nasiuduk54-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51baaacf3e8d597340051d15aae859f6a2537de5cba361038f8a98165de678bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-menjes91-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4389b60aab4714c4c1407d4ee99484f73c6f4c5200d7c96b51747ab0a9fe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lengko42-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0839e126506cf56b3708369cd12266ab248949da34912890dcd4c1363a39089e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

MAL-2025-98479 Malicious code in verbal_yellow_wildcat-32-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c37954c845b2128189409c5d3c1338500f8a61d5a78e86ee64b5266d9a67fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brengkes72-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f693abce46d921e75066c1e9f4bfe711b4c8cf232447272d1bda11c95748f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...