MAL-2025-112686 Malicious code in appropriate_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d37ad1a62e2833ee68f7a3a0402fcea34095b8d833f530730fa88bde2a5035f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118222 Malicious code in yanti-keraktelor59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797383befe090a345b48241f7b499c6b7c61c42867dc5b3e2fb220f86d65ce46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117594 Malicious code in udin-moci68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc77ee01266cb5efbb863ec9b56308fb3340bf5e28523ccedfb5285bbc3a565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118372 Malicious code in zain-jengkol11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332eafe39cba87db54d1c520c39a11be85a8aae7e0de057380f936d550e8e9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113433 Malicious code in dirty_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff1576a838546d6d8fcd9d533b2168f57236ed4fcc9644bccd2f374466bbe70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114530 Malicious code in hanafi-klipo10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1546aa05a86e9d24a1aaa0eb1e9764ae360448fc1f6bd37ed791dc4794c0989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-lutis72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5c6e1d070ba341263c31ef3a793fa6943071a0c140b65adcc0027b88b864bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87680

Malicious code in yanti-gembus54-miaww npm...

Malicious code in unacceptable_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f726437076b07505adc32db3717ecd3c5079f7933f42ccb5df01dd03d18320ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcccbdbcf2eb7b0ab8ca58143caa9ec8600dd03fe0d7b4d14a15398c462720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105941b206ea52257345220eb19ea8eed2eef7feb5a5f0d27dc12a766f3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1963cb49f3d54080d1855ee0d6de69d527492d784846dba4e08789455400cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-serabi37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae73ab5ce768e2f626a3e2ff5e3052d195f0cd3fd0578b13628b20e764abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-dodol13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cabfbbc42f17f7cb412b2e189fee437cdee002cd7d55cab3b9e525b870e9e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ba92890b206cca04cff3cba6d95316d93178601f10919d3bb445cbddd2ed69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rangginang27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5e846a2ac1c6ebd6a2dcce13a886d8ef3343ad5892e8a416b20c4723f6e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa139ee2ec5ba6e46b6c4e5e88b04fc9e65fcab3543a47fe2dbaf8a0bfb80f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875b499a339f3250ce7398eb9669e8fff6c828507c555e3f17a65192e86dc695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sate81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b2f012623ecd5423781388130d45e69cf09da288969a04120bc1c4e92d793b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gaplek86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69432163181e3c3ea11a49b3448d997788cea016f97d9c366ea38ec42029fcc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...