MAL-2025-98897 Malicious code in rapid_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb539658ec1c51e3b24fef0ec1d824f4963d17cd57834b918b17c45d46857f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98676 Malicious code in different_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e1023f78607f315cfeb524f44d90e92b9704e8e72850a2dffa5e072a8fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72414

Malicious code in hadianto-getuk67-pore npm...

Malicious code in dono-tiwul45-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1048882ed968df52d212d98483579c2781a9239cffe9595d24430872330a8b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tongseng60-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41dfe7e4de5327d01237d5e6e13a578615557db6f23e8a4ebcab3edae732ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72669

Malicious code in bella-lutis91-pore npm...

Malicious code in agus-telurtahu66-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e79a5abbbc44191cbbe3c8666ee73cb856dcebfaca45ba52db088226e30ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasi4-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63544d25438207b8fb3027547987efdafaa814942000f9808ff319cae75d6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue9-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a17536218d8c5275dcf1e6e87f21b6399e096e211c0fea734f6f42da63c773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...

Malicious code in gopher_aqua-28-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf3e9e6dadd89d36dea5979d7299e41ec28fec82339093ae2828c288b6ac1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan63-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a997ccac2bbbfd5f6206483cdfd1b64e7cc491d02d25ba1e5900883adf050bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tek71-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a585e80c486248e91df68483c2b3e736bbaf2cf6a9851f9efecb26d73c20447d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak69-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a6f809947ba63da36afd6e5cc71136bccbf210a480835762489591e097b02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-papeda60-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a20c9f6e7f4f53f2266b6d0d6b9eac581d8664d2af2a4a3ef1c4f3121ef281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97985 Malicious code in joko-tomat41-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e096ff9c53821c08273bfe35b2d6b2d25d1bffe347415ca3d97afe4308917a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98566 Malicious code in zain-moci24-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef77d4b5fc38c1f1151a836c478438b541de0ceadc9968865ab0ed317477d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98135 Malicious code in maya-tempe50-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d41596311a7d4e5aa4f2e0b84ccc4af8b65d6bf5dd09fada5a07f5f19acbc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98419 Malicious code in tuti-bubursumsum96-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1adcb7f3ddb8e93d0e001f4b61dda8e9493add612573b8a1f6a51e69b5ccfff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97743 Malicious code in eko-kripik45-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5cffa2e5c2fce861dffa652ba81173193f2470e0eaa6431b35bf7ff9e9d658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...