Malicious code in open_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d04326daa58f9120251ea5f45fa6545b6795c73f1bd961c9841cb1e8001935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-telur55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8130304aa5f4a4400344336cf3160e8bc960bb08572f72f34d534f2fd49913f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mieaceh71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ae1794fdb01916945d06ea6d27f35345171a05a7b664cf6fba78faf046e90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66663 Malicious code in administrative-yellow-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c50eb7c74565e810bc59ebe5c0552e6b6d465c32fa164ae08356f6945c6b53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56746

Malicious code in vera-kripik60-sluey npm...

MAL-2025-66040 Malicious code in wati-bika49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806a822c955f61361427012b1b2b363ac5f98536d0e69b906058c3335cd23538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50290

Malicious code in entitledprimatez3n npm...

Malicious code in guilty_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6badce2326116f0152b2b14ba8ef96875bfb229371bfc9edb72eb608032c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49756

Malicious code in narrowunicornz3n npm...

MAL-2025-57231 Malicious code in kurnia-pecel87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ee84d5817832592404b757b5328fd3e4d77de566ba2e211747cb6e9f2e5982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54234 Malicious code in putra-lupis64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa4f309f8314347e68e0cdcf7815f7f04032513da4a6eed5ffe59fbe00005b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview @aio-commerce-sdk/config-tsdown is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in @zalastax/nolb-li3 (npm)

The package @zalastax/nolb-li3 was found to contain malicious code...

Malicious code in maxujun-shijie-mingkan-sudu-erlingyibalingba-yiyi (npm)

The package maxujun-shijie-mingkan-sudu-erlingyibalingba-yiyi was found to contain malicious code...

MAL-2025-43910 Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)

The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...

Malicious code in @zalastax/nolb-gooi (npm)

The package @zalastax/nolb-gooi was found to contain malicious code...

MAL-2025-41243 Malicious code in zze2 (npm)

The package zze2 was found to contain malicious code...

Malicious code in whiskey-tango-bravo-htbax (npm)

The package whiskey-tango-bravo-htbax was found to contain malicious code...

MAL-2025-35741 Malicious code in test-mlw2-mamma-circa (npm)

The package test-mlw2-mamma-circa was found to contain malicious code...