Malicious code in ade-tapai50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc719e9d6554325ddf7dfe14b1fb60cc8f5e69be91b54a2a2b221a0d793188de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-miemee87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494f985030649d9c0988d349ff5bc13ce664dd67e83d258d6532dfa08c083f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90799 Malicious code in super_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1535a47504390190dbd7ded71bd11fb92675f03a8a6b534f1467cf38314342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92878 Malicious code in zaki-lapis60-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4c9947ae3520f04d04f4270bd4d2c9630dca55310161ae486b39a76423226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89342 Malicious code in overall_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83940d192f41bf0b5edefe6edbae74c8a3d20f955cc86221543069337c556b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82547 Malicious code in yanti-nasi84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064b47657242c7a94b1e0eebc8553d476139b45c6c7119b2a203f51eded60e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cb460041dd6e492df0169b55dc03a4b475a5b3b2fb4f983b65d87373a5b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70685 Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rendang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a59240b5f5e65d26922b1c9f23cec7d211bd68715ff551dbc4b9ac95b196d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63372 Malicious code in hendra-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6f8c4626760fa5e053c14bee95e9b76b95a2c1cfbf9bd01c2d2837d52f3b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3dcc01cde718d0697ab8c9fd3567098f999f89500c2c95a473cf067c4f6c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60340 Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-soto68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d144e7d94a9ca7d18ed779f594c971358dc3d4662030dac2b1714989dc4ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54482 Malicious code in qori-klanting23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c37e399aeb07ec0e5a36ad4804c3cfd1fb649d3ba2daf1069c5a8753f167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasiuduk14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26f929adf468b0f5595aa2984293b77d44259058c51b679e8bc05a29eee0a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-keripik65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641d591dcc8916554086c3744775cc5b906279731b6cdbc544fe073ff0e92d66 The package andi-keripik65-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dono-lepet19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29362e690edadf049901556fd81d29b06ce41042dc64c2d250b2bfdb5dedb4ea The package dono-lepet19-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1461 more potentially affected by CVE-2025-57833 via django (>=5.2.0 <=5.2.5)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-57833 Source advisory: OSV:PYSEC-2025-105...