MAL-2025-72968 Malicious code in fitri-getuk36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c93b6e3ffbe7c6f6b24dd1a77bbdb1ccceb05b964aa2489f697cb078a91818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74830 Malicious code in oktafian-klanting85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcfff46ac20f7bbf89de305b5ce81221631a4112af65fa65cc97f8145779ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly-emerald-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c39eb1dfccceffa15f1af561889ea3eac760b23d76d3ea2b180d4852e893df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71517 Malicious code in watery-amber-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b565d931ee9c549c8e11b892de50c279aa329df8c45a0f2d5dfd9d4198f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67780 Malicious code in disastrous-aquamarine-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccef3feaa0399327be4eb1abb8661edd4f5910272acfadbceee5a3bb2b59a7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64084 Malicious code in lisa-kue9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7088fc2ec2cd50c3120ccab3278106c40262ce3f31db2c5143abaa61e7a63e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea338711b11e4543a276144cb983538c0a123d8f4c43bfa2c6abb5ff07489931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-nasiuduk89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9fab7874199e658f2efd8add16708a38280a8075c6045af0e9161d9b9a6988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60505 Malicious code in fragile_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecb5d503453a0d31278feec65d118295e317c0a54334a715b89933cea328ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-ruwet41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc706af7360241c65873129bf3c654e56299cc78cbcf7aa5c5e93a69683a728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59490 Malicious code in wibowo-jamblang49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ebce098c64d3aefa60f7bebb2d9a2f905c94fc68b0eff3b081f9c885097684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-semur88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af9b1c715a3c1e5f2918d4e50f257a7013ad32bd2398240737306a2712cc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51469 Malicious code in dewanto-bubursumsum32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eba1191e32843a5a410bb3f639664208bad67314ae24aac013d5f420698641b The package dewanto-bubursumsum32-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign tha...

Malicious Package

Overview highchartsexport is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview owa-strings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview ot-performance is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...