MAL-2025-65024 Malicious code in religious_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c4f503fe38293ea691976918f34d6411b086ff0e6f14ad2da8f9134fb313ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65269 Malicious code in selected_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd4345732d4874129068720fa03e107f9fffdc473925aec6eb089efacf770b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62730 Malicious code in eko-tomat45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc58a1b423398ddf2fb0a3ec3327fd0e81647dd20be0e6ba4307186f1fc73cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63034 Malicious code in fitri-soto53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc7013bd1db418ea34fe635da21598e6d2800b4e4333b873466a0b0eda4b963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65172 Malicious code in rudi-buburayam14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6d1564b14ad0ccc37f9b9e26d76349448fad951566db800ef2988192bc5c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview tensor-fi-utils-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview supports-validation-checkerlib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview swagger-express-evaluator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview bcp-security-package-update is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview szsec-infos-report is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview read-async is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in alleged_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfc6c039b2faa6e91176748a3b075663722e2ab3cd9b553ca8f4a2e27fd6279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1203d30ee4fed0a0d0c26837951d8ba66911babb85c761e7afe875b1163b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4a8aea13f710a44234e3f2fd72b761051f335505897d5862c8696543baa442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0175b5e39b61e3eba0557e517828826ab92e8c0b65d1ec0ccd4593624acf7169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273a1c43ffe35c4b5097bb3d823960cc80979621187f0bbec0dcb539df3418e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b28dc9b8e785f7d0029a5a767e31524e45e9e948335810c84e7e97319d33cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d1e7ca72962ae7a20f5d2a8cb0844fcfe179217d36fd07e278dec7021ff6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d249b636baf473f5e533caf8a0aa7df65ae10dfe6e5ec7fc83deaa374c0c610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c25c49f753ad52235051bd27cc380bb97102afc862a09646c0a4decd44d1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...