MAL-2025-70117 Malicious code in puzzled-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cd3fd6c02d9098784428424e4fbeb018b16fc13343e5318cf785795774cfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-purple-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe072a1cd0e4b0a5d5f2aa0a8aa1db6bb865dc5aebb6999466bb5a84be708d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70357 Malicious code in resonant-gold-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61bad47b0d5de42a99e5a8f18c2e50c6efe9d5dfae230ef2f19446a1d3a964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-59945

Malicious code in eka-toge68-sluey npm...

EUVD-2025-59718

Malicious code in fajar-mangga25-sluey npm...

EUVD-2025-48974

Malicious code in yelpingporpoisez3n npm...

EUVD-2025-39671

Malicious code in fadhil-peyek45-miaww npm...

Malicious code in cindy-sambalado96-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff805f2635e738a510d97fc26ccb8d5231c20040c53eaa740016334391918686 The package cindy-sambalado96-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in udin-nasisayur48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ebad8b3123cd3179925f4c81772819a6d92fced107adf912859808049e361f The package udin-nasisayur48-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in vity-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd2e751d57f4a04b6019488c79debf3467879ee63c322f22ebf35544584cff6 The package vity-toolkit was found to contain malicious code. Source: ghsa-malware bb4930932127303392cd175222ad1777bd0119cbea931b6bfb68c8913bbb0a40 A...

Malicious code in @aio-commerce-sdk/config-tsdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ae61acddeafb85596fd6c4a2c12309826d57b53250d789af0b1145bc8a2c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crowdstrike (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cd49b95ecfbbbeedc96c140184f8543c29b3a6b60688c32bb40459bd164a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48580 Malicious code in node-get-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac8d13d5bfac4dd2762c47c3c87beec273f4f7481b6d8b5d405bc5d5a9fa3f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-remotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ffa99cd71dcbaf3fac3816f0a75102c058edefd706bfcf1803d0c50a5f43dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48221 Malicious code in redirect-u0e2q7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8b0dd60c89b0c84968f34108c06d0e58951c2c9a1b03a2b826c6261e7da224f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filiogrean-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18efdf5e885e4f3e7eb4999818f65f73aed08d4516593db92d960044927eec86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47990 Malicious code in e2e-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...

MAL-2025-47830 Malicious code in nodeapi-json (npm)

The package nodeapi-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adf38cc7ff9fedd8e0e5018c03c9141360823a8c5143181264185160ee040728 Any computer that has this package installed or running should be considered fully...

Malicious code in @sev-ui-verse/api (npm)

The package @sev-ui-verse/api was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414d159764ceef8011dcd7e75ef5fbfb99ec42da34486271031460875812f54b Any computer that has this package installed or running should be considered fully...