MAL-2025-64987 Malicious code in qori-semur56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a8bb546d9db735aa03bcea34f319669731dbcf4ee0d35102a5481c38b14ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63485 Malicious code in indah-oncom61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4628caf234fc6a0d755adb99ad3d9887ad3ced2e96ff1dc237ca21f7074aa6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66451 Malicious code in zaki-empal67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe06db725746b90481450cd7ada7f33ef4912ef30ae9e0cc17c0172ef67f88df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview tensor-fi-utils-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview supports-validation-checkerlib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview swagger-express-evaluator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview bcp-security-package-update is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview szsec-infos-report is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview read-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2025-61209 Malicious code in ridiculous_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2352ca4a9622f957e23e5fb09b23c1767db98b40db9706e12439e1aaec161c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61597 Malicious code in vitreous_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490131494f6ad5a6d5677821285457105ed2cef4cf52e0c91e7dcaff4948312b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60930 Malicious code in necessary_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5de1187cac18fd52c931aecbc981ed76b4f3c51705728509b5b4c4577ffa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60464 Malicious code in female_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5c63b8c0a03c0aeca26524dbe95230bf0221e371732b016c8e3c1a5f8d00f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60964 Malicious code in okay_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4976792553c9f796e581a2f5f789859e048610590e71dd358be00918736cc939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae74aa5c5696ebcdb05b64375037f29c18b13c965d917e92ae4e8126e876981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60233 Malicious code in dangerous_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86023cbbde29c13472a9c9168c0021ef5fc3faa244d4a291810d7e585d514ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60654 Malicious code in impressive_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a4c7b111a92621595f3cadb0e046acd837a99f7c0c2dcf561ad85a43452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60843 Malicious code in mere_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99061970e6fd65f6d0bd28952eff237e21e51f4251520071b3113143e6e3a7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f16155670228ee2982b35f397fe28ff7787aa497eaf18378c115e5cc428689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19fe2c39f0ab7e211ca80a806de1c3cad7d51f29be394fba6254d7695af127d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...