Malicious code in sari-lengko42-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0839e126506cf56b3708369cd12266ab248949da34912890dcd4c1363a39089e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cod_red-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801c1064935fdcdf38e8f67f798039c6e3505e5447bc493bf0876f5867f078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpion_emerald-62-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdcad2de53da52ffb3b004842798053cc55437aee0af439c26f087f1e6c557c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-nasiuduk54-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51baaacf3e8d597340051d15aae859f6a2537de5cba361038f8a98165de678bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx_brown-29-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e1871cd02e5e32bdb198d3f2358585fc5b40fa0549bd21fd2e8627002e7e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-wajit37-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b46db4042cbf5ebe7a525a8ead6708f9ec43e935af55568d218f2dadbb7c8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-donat40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4f1dec48caceeafb362a7329daf5139c94934e2ba73e5d61fe0ba1583869ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-menjes91-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4389b60aab4714c4c1407d4ee99484f73c6f4c5200d7c96b51747ab0a9fe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)

dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...

Malicious code in quail_amethyst-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981a8d274454d54b2649bfa2689fc22423f2f19ffd9428204eaf38ac201e266d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brengkes72-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f693abce46d921e75066c1e9f4bfe711b4c8cf232447272d1bda11c95748f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98518 Malicious code in xaver-bubur82-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c48a47e0af24b5f388e9dcc108d94f4b072bda0d47ca66957d59ab60c3d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98479 Malicious code in verbal_yellow_wildcat-32-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c37954c845b2128189409c5d3c1338500f8a61d5a78e86ee64b5266d9a67fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ead9fac459cc985ed35dd21fc0d7fa3e430a19f49d9d826c0d472e42a16686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aaab0353a991b511fbbccba02672cedb4a75697566298a9248f626cf42a884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ca00231746ec55bd66d87f9bd70639aa4c0ff2c20fa2efb6f1a8309a3331a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567e6f6af9b6fd025796e28b59ad6e95217e303abd76e06a23363ce10a725096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5468b4a9187744b9bd36eb84b3c06ea46a5685acf0c9aa80b989b2f999b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02b3f4f06503f6a46d3d669dc0112968d8594867c84c132184c725ec2db6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1aa80e4e8caff790a4009984fc41c23416e184eaa07d829cbb5d496eca12530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...