MAL-2025-93306 Malicious code in automatic_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c30a9eb6a97dc8f93a712e7e316280366fc862fb972f5e7c8b96fba7d45a3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95290 Malicious code in lively_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53369c129cd6078ebb8033fdce4ff403d8103a18e49dff55f9e627bdf4fcb0ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96968 Malicious code in territorial_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ea0cf1228d8bd2151561bbbf05110d7bffd5f241fe9be3002853050e8ad10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96366 Malicious code in right_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c143a673e3f63c60889e253cbeb17dd87cfe8b906f6509438713ca0c1d117e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95254 Malicious code in likely_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a70df838b79c140738e83286fef74e87464628bb5ee95d7ba495a8b6a211e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95741 Malicious code in okay_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2941e69b4608a54f7ab9fd0d42d3a76eda7a5314e2716d37338cc281a4641153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kemplang63-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef90bc2bef3d4c091b7e7719775ae8d8dd3eb811d21c9610cf36d76ef972626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lodeh84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0b05c15a293c22c078178c814de08436b6f257d179170f86a985a315eeee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87098

Malicious code in automaticcapybaraz3n npm...

Malicious code in xaver-rangi31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749d29b65257fa2ee3fd431f50bcf03139c956fb17b282963e31a522073837d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5829e8d7c3fffbff9dcd2644b2c0f580c4f55a3393e9e5422606ddce35a3d725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sambel61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f347e27de8d7bbd4e802862abf983b13158233a59548e80590ab1380ba658b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a85b71d6e129c4374ef2b504181940eb69ba7ff00131ca96994de780cf13b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-moci55-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe577bdea06863da4644565b1a9376f16e2808de1adca5691e1d4425dede62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac9b1a9b52b63cff17dbaa7329990a31582557cb6befc71661a49aac524d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-klentik87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c89bf14d86297fe1bb6b5e7ce0fba2a29a93b23a58fe89e2245164c8767065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-ubi26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b88d126885ad8a13b98734a5bdb92b6a9e0f34a80966187cb676a45a773c526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-martabak69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb7f4680915738d1091b7282699e10912511dfc5e533c1faaba329235cd7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mendoan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75ff84c14235c7ff1c0919b8282d7ba4c319360f65f39c0090b77b7cc9c906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-martabak65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba5150040561a21ae3b153bd26efd0e6faec9c474f67470e84a231c324baf48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...