MAL-2025-188203 Malicious code in nebula-fomalhaut-auriga-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7100d241d71061cfad199022166d5a46f9a2ac290b4e0fa6b68327aecdd9f1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133561

Malicious code in teate-thy-sonic-avejem npm...

MAL-2025-157686 Malicious code in kuinsnu-lki-kagbdsasodgasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8da0576747a56fad39d11a1fee09b2429ba28517a9d87f6e6194e60b368158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164643 Malicious code in rino-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad388989d3ab49cbd1b9d86cf5f675f5a449d47cfcf46dee812a3e8d4e12654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122801

Malicious code in registry-concurrently-hercules-docusaurus npm...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-global-levels-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c51156dce9de4ef059e365316106ed44ef797131009a2bda0f1286fa23f7a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143308 Malicious code in hermes-chromedriver-registry-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fb32193ca623e4ca985339273e09aca585d4284dffb455bbcdd79c457663d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137182 Malicious code in symbolic_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86a8b8ce4edb6805735592d33860e2dc6f340d3403c0e0eb355be3d0bfc7df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-wajit80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8da48d6ae4ccd941c6a95bda54c722448cf5a4afac6f7e6b762f76fde5cf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103431 Malicious code in gusfmbo-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf3e47a4a7fb232eb3a8f76e020c191686ebafa0018f3cc66416fedc3c7add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-sasag63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff238bbb7a0fb3fc38ff6b7e510d282e963cde9972358a00f9de9207bd1015a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97283 Malicious code in vivid_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b24778e683965e250eb68f37a739fe7a118d90df7861b2f1ae908653b8cb00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-ketoprak33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd638e7f26422e3149375a6d5942d2b7864ee3d5982ca2548d19b7a4d07b9c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kue56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569bd9e6fe5c31cdbdedab4e83924a1ddd74f8db5493edcea080316f7875d9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mieaceh27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb84851d7238fe7271f231be09686c8cb90b6680a5c40125cf56bc1a836e2666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79568 Malicious code in laila-liwet93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3027a1ebd1f9ee8f1b71de947f327a574b59b04bd74bbc8b7589f39252fe408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60749 Malicious code in lesser_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb4975b42a2d6baa9cf8d95ef8e039363a6b5b3735806781d16e78323247d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-mangga75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fb39b5d74ee19e85e84ca35e8c9a5db1e589c24a0d79518d2ffeab19327830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oci-console-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce011b024c9c3dcf78578cbf559de94a96364525ace53ce28457dba2053bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...