MAL-2025-95228 Malicious code in lengthy_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e82f75299621acf09cbd9b48803a86710f50115bb2bb4beee256bccd89bcb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95442 Malicious code in melted_puma_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1b6dd0d64beee84afa6defdab76e3d97c455ce9117fa872d1f308cdb699461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93279 Malicious code in asleep_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489419a18d301dfd00fe690993a8478e7d9f53bc80fff104cb634661ef583dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94920 Malicious code in ill_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e5d3b51ecd814b35cbebb676208cd90d6b031a6ccb5f324267321fe8ae3c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94959 Malicious code in impressive_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693d64f76b88be67a2fb8e39e4e48cd6ce95dfd798c83b621f4b9be8d3c42232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97247 Malicious code in verbal_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda95a33464209c17ae07b619207ebcd90e16a44a10171c76a04975752d3689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96373 Malicious code in rigid_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce06a5cebd1a12b3e488ab99719157c69f6e76a499756979b28ff4abef7434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-empal73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e6be0944e0b60fe85a19168fcc6a63d22773fd6bcc17a7dbb2f87b80648e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-mangut34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa7426009073760345a551575de86cd44875cbd4fd9757fd9ee6991e826904b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-rangi57-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cfc135ed2455f25dc7ce291fa09ab688f9493df52059a5fbb110a8c994c78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67869

Malicious code in patria-getuk67-miaww npm...

Malicious code in rude_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50175dcd4dd05e68345f862b8a417f43dee7bc5c225b281074e6ede0116cfbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7353c955612bf13009c4465363d418b5bf7b60531ca4767eb4ba666b88e8b132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-ongol-ongol46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14afdfa192706e2f948468145e25916b196c340a888fff2d03908acf780b08c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tongseng93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10326b9440369a44e6664bb058591e15abb996380327a6a2dfc5ab77b05d3acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d391c18a90339588fcab283b549fd5d70eaf04d067aa87b1974ce7e56563f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brengkes10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66adce25532a6ec1cd19c5dcbda24b919c088de964aa2c1aae60feadc72ad49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lupis46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af02f2a3ebaa725679f6632f1ae30f2a73463b6aa1e292cd4126016c5c7c236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kupang55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881a509638e009409da7ac1300631b76499b8c0304bf0976d5338f56f4520a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sambel88-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a033a839bc771d2d28ad3e8e3ce431826425b27b5341f1321056db4a82138b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...