43920 matches found
MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-181549 Malicious code in roti40 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536d8f672845098f77245e538d13013816974f1bda27d24177e3b797b3d2f653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-181503 Malicious code in gun9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-bojfo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051acafc8deb19cba9ef3589a74de1d3be39e17b95bcf24560160ab1d4e1a20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +19562 more potentially affected by unknown CVE via nitroteh (1.1.4)
nitroteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on nitroteh and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/miftah19repo 1.0.0 - @mipta19/nitroteh 1.1.4 - @miptaa02/jiss 1.1.4 - aabi-alfi-av 1.0.0...
Malicious code in teate-thy-sonic-zacam (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d791cfce26f0826292210a4f58c51526758b7d9760d1a133cc6de52766048acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-ovnu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d095e70616a281e0646f869a713629d592d926edb9c4cfbf60ae83f45ab6fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fig-dikanamufai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa2a890d35e29260bfe534932f8b860140717585adf1b6acd57aa345978905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-irkem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d15113973355cf6ef4585c7bc49c57519ecb58e4d3e85d5280a55ce4a34c480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-irabik (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f78c9b28880cc882bc9920e44709df64d9f9ccc3ba2676e516e04a7888e8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-itcu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96763493006ff206ebf0aa1d23cf1fae4d705645e090fe80f426e276f9179127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fafunig-amfia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5295e23d3e705ae40d28decf746b543534eb203b88d2f28f3dd3d45de0348a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fig-dufdyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c767d1bdbc2bda51ded391bc18977c7f57704e9c2ae2e1064a60df9ae4be7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-ucuwaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e22526584efeb8a7cbf9ea2c1978ceb89a493f9ea66fcbaa0d254302fcea71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in teate-thy-sonic-foner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8bada449c8b306d56975dae02c64961bcadf03e01695a369bee58c5670c558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in anais-papoa-0pipaimaoaa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcbc06a297f1375f74863ab3f70b1fe4343dcee1f0f641e6b03fc26b88023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in anais-papoa-0ia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8319d92ff3d88ad64ff08abffcd46df7533ed83331ff43db42e7dbf5e29103c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134089
Malicious code in lookingan-jaja95 npm...
Malicious code in teate-thy-sonic-ficho (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6282ee94e34414b5bc4a9c25ca26cbd3d2f5510828d061d8392381a9e23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...