MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115739

Malicious code in canopus-pavo-hexo-metalsmith npm...

EUVD-2025-117307

Malicious code in inc-tomato-hoverfly npm...

EUVD-2025-117326

Malicious code in historical-yellow-walrus npm...

EUVD-2025-117000

Malicious code in visiting-black-caterpillar npm...

EUVD-2025-117235

Malicious code in mechanical-amber-panther npm...

EUVD-2025-100699

Malicious code in vulnerableturkeyz3n npm...

EUVD-2025-103927

Malicious code in mahesa-tomat39-riris npm...

Malicious code in cognitive_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00247abc8ce946848d32ca39bc2a87ad6ebcf10f5a82e15b96db20512ed501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tumis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99093

Malicious code in exoticferretz3n npm...

EUVD-2025-101802

Malicious code in tiara-naget84-riris npm...

Malicious code in dian-serabi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee681e96c58c2f4dd4ddafa7370dc3b2e90372837f6457880e68c434135242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104099

Malicious code in lisa-sasag91-riris npm...

EUVD-2025-100077

Malicious code in xaver-sasag85-wekto npm...

EUVD-2025-100216

Malicious code in woodenchipmunkz3n npm...

EUVD-2025-99751

Malicious code in diverseduckz3n npm...

EUVD-2025-101820

Malicious code in addedgalliformz3n npm...

Malicious code in fast_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6367798c8780647fa3e6694ffcf9d3c89815d823ed0fbef2db6abd61d8c48d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-jengkol72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836bbf6d80999f0c98e37571ab10c8e3dda9f9beb77d9d944d534e85f32639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...