MAL-2025-114370 Malicious code in graceful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787c85b911091b97c3ac38959f131ffe4acccdc9ef3aee8630e70245478468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112928 Malicious code in budi-kentang83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6be634e993f623cbafa40761623b51e0f79bc939177519d7f8f39604adbe72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118320 Malicious code in yuni-esdoger81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0455e2a450fe0421b51002a7ce12d9d398d24633af62480764bdda74135b2a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118177 Malicious code in xeric_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0165d8963f7249f3a5c1d9735cad7f02865c089b68ad2b86237a5f14c9200313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114467 Malicious code in hadianto-mangga27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a84c89e0a8f8ec6c18e44495c8703f237aed50a918ca4762cbfc82a0b9b4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113880 Malicious code in fajar-ruwet2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bfc4097f35150abe451d0b8479f1b04eef6be598f889a5d94a1c564ec2b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113238 Malicious code in crooked_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708d88bee363fd0722a4b22f34b9ddfac3b2bb5d541ed7bc5cb2305b947caba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117189 Malicious code in specific_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a87b6d0508c4298903ea7b9cbfed537854ed946fb2db959859586419371ab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92265

Malicious code in elatedcapybaraz3n npm...

MAL-2025-115569 Malicious code in lost_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5528c1cc44e21dd409558f506468e579520479386eea18199e996be28f7dcfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113441 Malicious code in disastrous_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20647903bade0265d88c9d2fdf82784861878e69c6d826fc4dbeb7fa71179078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118096 Malicious code in wibowo-tek7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8676469f32e46a0f4ab3db9eef9eb708f0a19aa540d8e5a125c64e9559834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115739 Malicious code in managerial_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505c0dc81f762f88ac83fd0ff1f67ef67808cdc2809d54900f30e8f1a0db5bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115415 Malicious code in legal_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ae4c9b277f2e783bf6d25f7d9049a6dcd0307dd61c5b9c406d96cd969215b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115637 Malicious code in mahesa-asinan30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2554a3809b2987f453102711ae3d34736377d5d8ec6c4f61e5489d3ce39327c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d515e15944163a5d6ca38b88f03b7afa31f750ebbe446baa2d70d0b63d322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-bika42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e73c2fed65443c139f9548d82e3d3a045f28400285cff5fa75449a8701fd1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7117bf28d0a4f93d58b245f630cf20a88b481fb7f9d42cb0ab6470e1fca92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lutis17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afb4ff20b07b70bb2787a65a37f771781afb8dbc9bc863de3030201821300ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-menjes30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4f9330442fc0fa241292b029b6890f436e261db46dbfd9b77073b296fca92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...