MSC-2026-12985

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-12606

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-12497

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-11699

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

Malicious code in fajar-keraktelor49-miaww (npm)

Source: amazon-inspector 3159c4b792dd489f552ce3aef9c9934a32c2d80a024a7cba2b97436b863cf249 The package fajar-keraktelor49-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...

Malicious code in erick-botok99-ruro (npm)

Source: amazon-inspector 8359485a95e22abff88f626e52141f9aa015bee6c9a7f494972b09a50cf533d2 The package erick-botok99-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These package...

Malicious code in eka-ubi70-riris (npm)

Source: amazon-inspector 908ad9a3a240b6953a37b99ba0d950f36e93028e4d4dc691867b8fe326035325 The package eka-ubi70-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These packages...

Malicious code in dewi-gembus95-apidev (npm)

Source: amazon-inspector eae78e49c4dbfb4ac9400cb60d5425943e91c6651f96deedddc0d19d9a54aa9b The package dewi-gembus95-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...

Malicious code in citra-kupang96-tititugel (npm)

Source: amazon-inspector 57c0e9b753c4f587d69ec03765e3780afe3dee3929fa75bae76cde3894c649f0 The package citra-kupang96-tititugel was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...

Malicious code in andi-rujaksoto45-sluey (npm)

Source: amazon-inspector 851be5f0bf03844e61871509830e9ccfbc9835c14e5e86955a384b09be4d4a63 The package andi-rujaksoto45-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm with over 15,000 spam packages in 2024. These...

MSC-2026-11565

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MSC-2026-11550

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-11543

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-11534

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-11396

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

MSC-2026-11395

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MAL-2025-51710 Malicious code in erick-ketan17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dd4dbb400563b36546d0810b92d74e1c50130591ff9073e0d3e30e3cb46afc The package erick-ketan17-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50829 Malicious code in andi-sate34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75742e17e8066292e13018962253fd5cbc852afe9607d1e5dfff828e27f95e88 The package andi-sate34-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50340 Malicious code in erwin-jus61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd393ba7347aa3fdb21f73078495da6f02ccbbdc1814e247e3e193dc81bc66d8 The package erwin-jus61-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51369 Malicious code in cindy-ongol-ongol75-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c7bacd9c4a500795187d735fc78cf313fe1fb44047e8dc31bd758bd2fa9ba4 The package cindy-ongol-ongol75-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...