MAL-2026-3121 Malicious code in @taxmoninor/taxmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f9358f8af80b7021c6d4bb86f10796de5ad8ef2ec941d0057954b9e6a18355 The package @taxmoninor/taxmon was found to contain malicious code. Source: ghsa-malware...

Malicious code in braintree-web-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72db908797ea8aa5f2c1c6d89356499ed46b677379648156e795ee3049b24b20 The package braintree-web-latest was found to contain malicious code. Source: ghsa-malware...

MAL-2025-181974 Malicious code in flights-lutag-obolavuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e079b68dc56bdfa9ffd15cbe992e95dd06d20797534d15bc0cadc39c10045f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179475 Malicious code in anabuyi-inuznu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751c370874bf03224345809d33fa8a332a32e3d89d51f43086a47ff20c34d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abddi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db835c2008f7d75049dc1a263f944c695c2429cc3b1e31c147f00997682d59a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213edbcecb6250db7ecce0a806a790c7945f36132dd976c4ef09fce5fba1045b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a440f9323a6afd913fbbc0c04987205ce387195643df52d17eebcb3c59cc6b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-asinan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d49a61c126edebbc6f068f9266036673d8f6a9f2492593ce811622ff0b653a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126223 Malicious code in erick-tek94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757c49844492fd9996f695f9a3a4ee9ec2b68b60bc4a2d0df04bbf894eaadf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b13c1e5c90c849034412ca236a29c4be92d332042b85cd93db164017952e050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-mieayam33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd712be62e2875ccb200ac593244ff85d4af06247f5aeb818521f25f5a2e71f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117545 Malicious code in tuti-kemplang66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562003a80ba0ed8494ae6e664fd060ce6e8d5e53176fbd4e32a05e309f326c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_stoat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47ab7236febec623580c77ae14ec4000de8a4acdab661ca44149ef18c9d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108841 Malicious code in slippery_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7574cda9721581cd97701836c5b1b72e4a6a8360d25d443434d703a05a9aa691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gado-gado7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84ad12f1b8e52ea041df4d34129d163606424f7b773388bda903ffd06aca970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-buburayam9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a50391750472b8f20541cf6b70b6350a888e15a6249b9439e772171f8efb3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83009 Malicious code in agus-botok51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd1156d2d8c8948ecff8ae0a5782e46163cb7a15be61ec88f1532820eb72ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sambalado33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88861bb9278505fc93aba0eb943e6b2d1ddcb1e6c4f5d6b01dee279d2cf4bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78653 Malicious code in hadianto-moci77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da57ce902fd55234f2d2ef3424747f2eeef843f28e63abdaba00a5b998a9014f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...