Malicious code in tuti-empal50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345becca793d2a41deaf7bca1134da0070e3494998f6eff4640afa2685cba569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0521b5f19183f1978c02bd6585dcae927cf43b57e827d5b27e78882e2f625b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rawon98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20452303505bf3bf4b7b041f6e4482d866d4794775d196456008b47047f7dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant-amaranth-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31af5f91ed41dd1b5f6b4003f13d447b3c59c6a6ebdd7a597b853a4a14cde53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68766 Malicious code in identical-copper-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a1d4c9c2c788afa823fcfb1f702f9b057521e6a8dd52315e8549988fa8969f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66942 Malicious code in beneficial-brown-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41408f56057406a50d0407bc5a5fa533758c7bab3547f4d3364e1892cf4dd6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65442 Malicious code in stupid_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459013a069aa8d4b40688755b21f43af4df0abdba2537321653f458628a930ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kue54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46e39fe0511a9e926640025f80c2f531e06d2ab9cc1749400a9642ff6e7595f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-botok64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e967521e0b9cffef1f09cb0501dab765ec8b485d49f002d4faab5742180e9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-oblok70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b37746e372559bf729ebc1b75f0de178368c5081cf26e1686a95db001ff0158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-41356 Malicious code in @navify-platform/event (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41250 Malicious code in @navify-platform/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 306d60012db44c48b4e577372019b8171e2eb15c6cfb80a9c1e5eb7df32149de The OpenSSF Package Analysis project identified '@navify-platform/i18n' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-6894 Malicious code in commonweb-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116400179d508d6dbe723a75f049d05218e1b019474bca84f2ed62537219572 [email protected] declares its sole dependency linker-event-header-serial as a direct tarball URL on artifacts.yosiroute.com not the npm...

MAL-2025-38861 Malicious code in watermelon-i7k-project (npm)

The package watermelon-i7k-project was found to contain malicious code...

MAL-2025-37899 Malicious code in update-venus-ignite-bioinformatics (npm)

The package update-venus-ignite-bioinformatics was found to contain malicious code...

MAL-2025-41038 Malicious code in zmtokrjbhqixfykn (npm)

The package zmtokrjbhqixfykn was found to contain malicious code...

MAL-2025-37294 Malicious code in tulip-honey-fyn898-project (npm)

The package tulip-honey-fyn898-project was found to contain malicious code...

MAL-2025-39337 Malicious code in wirly (npm)

The package wirly was found to contain malicious code...

MAL-2025-35000 Malicious code in test-mlw2-bouts-erbia (npm)

The package test-mlw2-bouts-erbia was found to contain malicious code...

MAL-2025-34913 Malicious code in test-mlw2-awner-bisks (npm)

The package test-mlw2-awner-bisks was found to contain malicious code...