Malicious code in @mipta1/raedx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e81a672c284a46864cc4fa432a227ab51184980a252f33c4be415a52ce866c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156445 Malicious code in inal-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1442d7d541621b0a9649a891aeb9826c559eb677e028abdbb84b8ef541b3429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136783 Malicious code in rudi-mieayam59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe3580bc877b02c9f5742bfec00ecf3b201b5f8da9bc4f3a7c9cb88a9d6e95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123741 Malicious code in udin-brengkes15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b78fdcb3e3ed820b40849d7bad5681e66e3af931ffde24e68aa1d8377cc958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77426 Malicious code in continental_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa018e9beef1d739706448631d954aac892f12808738384ae11762a010ccdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Regular Expression Denial of Service in jshamcrest

The jshamcrest package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in to the emailAddress validator. Proof of concept js var js = require'jshamcrest' var emailAddress = new js.JsHamcrest.Matchers.emailAddress; var genstr = functi...