MAL-2025-171265 Malicious code in ghassanmousier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5429045e47b056cb0fe8cb0b68bddefcb8ad44247e746311a3369e9fa62b8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171698 Malicious code in orbitoracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8496a661647b3974bd082e394b9c77af207e41146fdec0c0a7b3e1a95890554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171009 Malicious code in celestialcraftsman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96cad932bdabfc7831bfb3cbdb5d6f63c7be1eb105c2e4ff36637ba3d4112ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171625 Malicious code in naqeebkashif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cad2adbca2ee8a307146b3d514f93f8c6010c234e95f1a2477e07fb7f7655ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liamharris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b0634e67537851e0b5bfc87bcdf62a535276f97e768a969a67abf8ff39027e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tikapermata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e21a593da097d40071ca74a87f8c96dd8abf07d55a78c2a49c1687ed59c448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nafeesashraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f315f0294a2750acd2e3af3c6e7713a2baf23f98da0cb50ab7bfe4e76f3519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anislateef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e0098c1f2634cdf32c349559d2a2e2bf0b9b7457adb98e7a9133fc5f6f3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mohanpatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95827ccab5f31b21b0b2984f6e69d470190841e2839b897438b75e6b8ff3f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celestialseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6577c6a31e6cd313d492090ba42a86133ee83185fa0b47721c07498811389e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aryoputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3cb1bf8aea6269a543cd5070acd2dc771732df92006de0f0b2c321f00d8e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afdalhameed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff70a755655e9bc81075c4aa93de35490007cf3d7bf3cc45ba38c55e26c68570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171725 Malicious code in planetwatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eb14d1efb74998460662c6119c4dc4d5efdfe19d18c9c89478c6a4f7c86446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170636 Malicious code in abdushakur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71a0a163dbd43a9ac97d804b8e61c4f81f827076a3bc8bdc03096f0e49e73a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171094 Malicious code in davidjames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47af7e4649badd8643cd12969ee6bfa52713af97fbfe13a8b2216d8cb72642e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171319 Malicious code in ibrahimameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41acc4d96fba5aca2df90c5698f57ccbf3d5d06b3fc00836f6a9727af1e5ade7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@doelsumbing87/teadoelsumbing87 (1.0.0) potentially affected by unknown CVE via teadoelsumbing87 (1.0.0)

teadoelsumbing87 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on teadoelsumbing87 and may be impacted: - @doelsumbing87/teadoelsumbing87 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171954...

Malicious code in jacksonthomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba60ac45e83676086b32d4454c075f05dd316c658a05cd7c68b59564c44fc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in felipelima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281e58f58cc4d5ba9afed94f5b8f46e7f762e6209523b4d09ba043669117b9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...