Malicious code in lina-kue36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429ccf25afb2ce0cbbbbadefb0c2bae8af28a5af121f3b9714d64b66b4539de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65421

Malicious code in adjacentwarblerz3n npm...

Malicious code in riana-miemee87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494f985030649d9c0988d349ff5bc13ce664dd67e83d258d6532dfa08c083f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89342 Malicious code in overall_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83940d192f41bf0b5edefe6edbae74c8a3d20f955cc86221543069337c556b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tapai50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc719e9d6554325ddf7dfe14b1fb60cc8f5e69be91b54a2a2b221a0d793188de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90799 Malicious code in super_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1535a47504390190dbd7ded71bd11fb92675f03a8a6b534f1467cf38314342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92878 Malicious code in zaki-lapis60-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4c9947ae3520f04d04f4270bd4d2c9630dca55310161ae486b39a76423226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82547 Malicious code in yanti-nasi84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064b47657242c7a94b1e0eebc8553d476139b45c6c7119b2a203f51eded60e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cb460041dd6e492df0169b55dc03a4b475a5b3b2fb4f983b65d87373a5b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70685 Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rendang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a59240b5f5e65d26922b1c9f23cec7d211bd68715ff551dbc4b9ac95b196d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63372 Malicious code in hendra-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6f8c4626760fa5e053c14bee95e9b76b95a2c1cfbf9bd01c2d2837d52f3b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3dcc01cde718d0697ab8c9fd3567098f999f89500c2c95a473cf067c4f6c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60340 Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: OSV:GHSA-G4MF-96X5-5M2C...

Malicious code in indah-soto68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d144e7d94a9ca7d18ed779f594c971358dc3d4662030dac2b1714989dc4ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54482 Malicious code in qori-klanting23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c37e399aeb07ec0e5a36ad4804c3cfd1fb649d3ba2daf1069c5a8753f167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasiuduk14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26f929adf468b0f5595aa2984293b77d44259058c51b679e8bc05a29eee0a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...