MAL-2025-66040 Malicious code in wati-bika49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806a822c955f61361427012b1b2b363ac5f98536d0e69b906058c3335cd23538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56746

Malicious code in vera-kripik60-sluey npm...

Malicious code in guilty_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6badce2326116f0152b2b14ba8ef96875bfb229371bfc9edb72eb608032c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50290

Malicious code in entitledprimatez3n npm...

EUVD-2025-49756

Malicious code in narrowunicornz3n npm...

MAL-2025-57231 Malicious code in kurnia-pecel87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ee84d5817832592404b757b5328fd3e4d77de566ba2e211747cb6e9f2e5982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54234 Malicious code in putra-lupis64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa4f309f8314347e68e0cdcf7815f7f04032513da4a6eed5ffe59fbe00005b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview @aio-commerce-sdk/config-tsdown is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in @zalastax/nolb-li3 (npm)

The package @zalastax/nolb-li3 was found to contain malicious code...

MAL-2025-43910 Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)

The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...

Malicious code in maxujun-shijie-mingkan-sudu-erlingyibalingba-yiyi (npm)

The package maxujun-shijie-mingkan-sudu-erlingyibalingba-yiyi was found to contain malicious code...

Malicious code in whiskey-tango-bravo-htbax (npm)

The package whiskey-tango-bravo-htbax was found to contain malicious code...

MAL-2025-41243 Malicious code in zze2 (npm)

The package zze2 was found to contain malicious code...

Malicious code in @zalastax/nolb-gooi (npm)

The package @zalastax/nolb-gooi was found to contain malicious code...

MAL-2025-10030 Malicious code in @zalastax/nolb-_functions-io-labs-performance_t (npm)

The package @zalastax/nolb-functions-io-labs-performancet was found to contain malicious code...

MAL-2025-35741 Malicious code in test-mlw2-mamma-circa (npm)

The package test-mlw2-mamma-circa was found to contain malicious code...

Malicious code in tsconfig-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08dd3fd9f05003ef6ca4f61ed5a23a69fd09a1c7cd9973f6d2caaa673066c803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...