Malicious code in sinta-lapis45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb383dbe81564056c06814590f760c4ff5e141c95cc59750f41c1357b3d13a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59431 Malicious code in wawan-gado-gado82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556e08412f70883c9057b1cf1c410d0ddc5a5cb9dee00f38b46193d01bd747a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55728 Malicious code in corporate_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1db43109d09783797ec6dadd21faf0ac2fc0a709df7cc45bb9c593b8dc7c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57479 Malicious code in mahesa-kembang5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834abf8938ea315774daa04d524889dbacc65e781accae312d4ca2996ec21ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52267 Malicious code in nana-kacang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741b5e036bb5f77e79d47d2e4107f8f40d6596f2659e89d66d8fd83ea3fd7ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53504 Malicious code in nina-kue45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0708ab6d2b7d6d220a0195233d6cc52f8a4615e5dad99bb213690ed76b35b101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gulai96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46415ca09b9fc517838aaef21ccadb2cff5699cda0980c8389d59060e934c0b0 The package tuti-gulai96-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fauzi-buburayam15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2279a9e8f76359cdb7e86b12a889946703f5666a32bc658b1fe209334932013 The package fauzi-buburayam15-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in bella-nasicampur67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530e615606c3fac9b878efa9fce5921264bd3bf350baad231848e85ecf5c1aa3 The package bella-nasicampur67-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in andi-tahu11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1d3731b6e2c2caae4298916caea406d04271e9935f89548fdbddd4aabcfdfc The package andi-tahu11-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-52566 Malicious code in umi-semur74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9e4a792a45a319c7fcbed0f10dc7d24c0beed12872ee63d7ab2957bf7d672f The package umi-semur74-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-41252 Malicious code in @navify-platform/url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa4184dfcef3ef233797dc945800c262566392179ef6a2cadc4ae4eba11cddf0 The OpenSSF Package Analysis project identified '@navify-platform/url' @ 1.3.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-35363 Malicious code in test-mlw2-foots-sclim-porty-frown (npm)

The package test-mlw2-foots-sclim-porty-frown was found to contain malicious code...

MAL-2025-8936 Malicious code in @malware-test-sools-appay-hafts-lowes/test-mlw3-sools-appay-hafts-lowes (npm)

The package @malware-test-sools-appay-hafts-lowes/test-mlw3-sools-appay-hafts-lowes was found to contain malicious code...

MAL-2025-35020 Malicious code in test-mlw2-bykes-overt (npm)

The package test-mlw2-bykes-overt was found to contain malicious code...

MAL-2025-38903 Malicious code in wave-jungle-dra062-project (npm)

The package wave-jungle-dra062-project was found to contain malicious code...

Malicious code in acl-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489b16998820b6266bd347e1334303e6127e834aae4103899a3aeb7cbbc9887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...