Malicious code in dewi-gembus95-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae78e49c4dbfb4ac9400cb60d5425943e91c6651f96deedddc0d19d9a54aa9b The package dewi-gembus95-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in candra-getuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7bf0820bf15bf10cafbe308361047a14368cd58d8a1de1b4b117d133e135d4 The package candra-getuk21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in tiara-bakwan37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc9ca0ef7becc505aabe4778d1c42b40ff3e0d17a32c8454a5ac3584c24289e The package tiara-bakwan37-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in citra-mie96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ba90d5eb12e44b1910e97593f9b8ce5b81d5d9401cb3f384860d50ff206172 The package citra-mie96-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in cici-bakwan5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6c24e7195272ee8c4bf5e6736b1c216ba3a15d1c5293cb2e6b9b10c47d68f0 The package cici-bakwan5-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in candra-ongol-ongol63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95b50975bdc329a5a0ddbb1d82902a3f7cca46e0ba73c0a2e57b51c34953847 The package candra-ongol-ongol63-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in bella-tomat19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c46f1be309ce6eedac3c8127ae711856202c2ebfbefa3f6be18f0efab35584 The package bella-tomat19-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51183 Malicious code in candra-getuk91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286e4f0ad7c5d6e5c14b76c960763947d15e5f0e46222189ed06b4c302034f21 The package candra-getuk91-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51345 Malicious code in cindy-kemplang75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261115b511478da5f296e8bd9b1286ca6285e3870e534a90a27f5791898fc07f The package cindy-kemplang75-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in bayu-ubi89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248fa3265df92d5041212f0dad53ba0b7fc3b364dc2ebbb386d0aa48e2d4de69 The package bayu-ubi89-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in vida-donat12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5231ba9bc0b74fa546418196987a814d7f82d63da62d0198089c0cd80edd7b20 The package vida-donat12-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in candra-empal44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b19ffa868df349cda3956d1f5326b32ac687d445d60fb1a8987e4aff053bc4 The package candra-empal44-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51247 Malicious code in candra-telur96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc4802963da7732047236b7550eb52cd6396b4eae673d882d43b2dc48aabc67 The package candra-telur96-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in fajar-gado-gado76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734e706e60be1ed5c86496c804bb41ed8c5fe9a19ac1862b33b6670457e6cfab The package fajar-gado-gado76-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50366 Malicious code in fadhil-kembang95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdbec25eb658eb4a1e47d274491180dd37fb5e030f0d0344a7d67a46304a258 The package fadhil-kembang95-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51016 Malicious code in bella-bakso77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c68c2f395700f01f22871ec885f321fe1305d4945d9c4a4735d3017d6cf16 The package bella-bakso77-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

GHSA-8MJQ-32X3-22QF Duplicate Advisory: Malicious versions of Nx were published

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cxm3-wv7p-598c. This link is maintained to preserve external references. Original Description Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was...

Embeded Malicious Code

Overview @nx/js is an AI-first build platform that connects everything from your editor to CI. Helping you deliver fast, without breaking things. Affected versions of this package are vulnerable to Embeded Malicious Code through a malicious postinstall script that triggers a file named...

Malicious code in charcoal-ui (npm)

The package charcoal-ui was found to contain malicious code...

Embedded Malicious Package

Overview @toptal/picasso-shared is a malicious package. through the preinstall and postinstall scripts. A potentially compromised account operating in Toptal's GitHub organization exposed an AWS token, leading to the account being taken over. This allowed the attackers to expose private...