7 matches found
MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146240 Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in horrible_swordfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b15c21f1f589fe47f7403ac7ba3b38c8e6fe85bd0d69fdb57bfd81c7f581dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-83990 Malicious code in cindy-dodol97-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b2200a439720d0fb5fed8410956f8060a743245e34933dd5e913c7d5335dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89925 Malicious code in relieved_mouse_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed636be38db1c2858248ae0b030dccbdb862717a856763b5a01b8158af267ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59428 Malicious code in wawan-empal29-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9af86b31ee68d9c5e9d87b047e03685c2f648a07ceca1d583ec0936a73f4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
