MAL-2025-100489 Malicious code in cindy-soto45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cebb73085b121f62bdc30d2789879a9b9024ca6bef7fb5715b86e138596444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102586 Malicious code in fast_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cca7ef991d178f0246af80ea288920e1ba8affca7bdd9180e1b3473072c686f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107898 Malicious code in renewed_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6827c7c45623f0d4d80fa09e4f6f5126a645e5c7eb9159b745b2cf41b9c6425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105618 Malicious code in marine_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb0bd435276b31f80650d1fff93c744a6b54d6dab5d3dcdfd7e8915e3833fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108084 Malicious code in rifqi-lumpur67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796f5bf9962e5738a485941a950728c83cdbc4aa61c562030a6592b570967143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108171 Malicious code in roasted_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396ae45bdb5f34dcca036f1f84b713daeb3e10548eeb011250167fd40851716a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110687 Malicious code in wati-keripik39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523a152f2e0790fc06ea971d5c9229491ef76f9dbc453d23eff82431b858c08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107148 Malicious code in positive_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f36e0654f8345fee9d0a86201b18218bd0f707b24bd7dad16f74167a094f089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53e1c3194bf22631b782dcfd26cc1bc3e433fc4d480805c2654f643659ac055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361d4172f2910f2b1d041bc70db1bf70f1b85f11eea984d2ac919a01df58916d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98835 Malicious code in neutral_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071f8f2eb9e7262ba8da9b2c92fc44392544c39a12bd6e34cf7f5813bf315db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98288 Malicious code in remajasubuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1484c718b38d4259601bb04653d1df6e82e4100d78272817bc2e4be75a8848d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98019 Malicious code in kresna-sasag72-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dbb168744c66ea819e57c64d66e1051d8a2b68c37415a932a44e4555f325b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97841 Malicious code in gecko_plum-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316cbb7824adab770fdb456c9baee5255a9fb464e488f46d193e340b2e492054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98304 Malicious code in rifqi-ongol-ongol68-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43331a62b38db1be5052487a15aad95d52ce3ea518ae786f082fd7c410548d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97648 Malicious code in cici-lengko4-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675e940860cf80b2882f8438fe7161fe1bc51586817b3168013af0aad745f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_jaguar_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0384488b2a6495c822e5c30f07d01c0661ed809fe45cd995d3ea491cd9905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64775

Malicious code in continuouscatsharkz3n npm...

Malicious code in chubby_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2c23ee18c0e1afbbfce017ef759c57abdd8444682d29be5c253516a883e0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_chimpanzee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882201c8f8b21d216f18cda236edb3e9bf11f516cdea3fad46dbb6faf45acf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...