MAL-2025-170764 Malicious code in akifhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d458a99843c1e030c50b1640c6aa3f64db7eb0158c0652a7f3a1b5d073afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171273 Malicious code in gracehill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b9285d10d8708c8b2099c698f1f5b125dfe7d5d0fd3eb74caa92082f34a958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171537 Malicious code in majedmacaron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60c480b444091015f1554c9a9e1bec148f6a9eee75621963f65e2fc86b7c1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171713 Malicious code in pagi-chief (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068da2729955f81196162b27348a9e97c134cee022f20dfbb04534d433db3db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171274 Malicious code in graceroberts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50728a0ee70bb0b35da4d90d3b91e73d20bd0478c730282724a488f0b2c6f50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171520 Malicious code in lucaswalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f367123cf0a254536dd6ba4ef7edb45f85ade6a062784af8d7e2b3caf978c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171999 Malicious code in williammiller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26920a36655dafd3fbdb2eb6787ab235c9c9d827bf04514ea7d906b33ba3b4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171082 Malicious code in danilosouza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054588e6656f1565167f1361a5d30eb656976cde448466b45de8564ca8eef3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171716 Malicious code in paulocosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc89ffabc253abce5b383433fd6d61a366f90477a4796100b6cbff2e2c57d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145912

Malicious code in aoifeoconnor npm...

Malicious code in pedromartins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1a221f40eb857b3c559160343fa97adc32a28b9952750fb6d78618a8370dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145339

Malicious code in laminebaguette npm...

Malicious code in abukhalid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e513721be6c36fda58901da21dcb861b85f9da5a375f93a42464d3e85d29896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in starryknightmoonlitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b68c637de1ac5c91157d1bc14822962b323ce66a3cb7861a5f758fcecfd179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibrahimnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad47882585945fbb6a01e1eb3fc513fa53b1240c7349a5fcc78f7decd554ba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145233

Malicious code in michaelturner npm...

Malicious code in akifnazir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559a88c3435964de9afe2a17a2ad2dc36e347d7c922fb2c89297cbccd0bd8f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremajg (>=1.1.4, <=1.1.5) potentially affected by unknown CVE via beypremajg (1.1.4)

beypremajg NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on beypremajg and may be impacted: - @abbeey/beypremajg =1.1.4, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170969...