EUVD-2025-96942

Malicious code in kurniawan-kue5-breki npm...

EUVD-2025-90268

Malicious code in lutfi-rangi51-miaww npm...

Malicious code in oktafian-takokak31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179e2b6d84d5fac56e032e3142760a9fe4268276105315588a638674932a0bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115985 Malicious code in native_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a8786a58f808086f10484ffd4e1f8f0e661bbb4620f01ebe027de004fadab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce_orca-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cf6e6426698743424ce705f4cd5b49c4807b3a4fb9984d31ea643211285ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76807

Malicious code in frittata-notthedevs npm...

EUVD-2025-76799

Malicious code in functionalmagpie-teagooddev npm...

Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78625

Malicious code in perfectponyz3n npm...

Malicious code in loose_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca9d99ab1e871e7a6d06e7afe02659fdc38533cbc45375c196236a0b7c2313b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82437

Malicious code in compatiblecardinal0xrequest npm...

Malicious code in fitri-kentang65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e971f82c542b4dab97f0c737b550e98c5a84b157969819e2a66bd0d7bb0d13c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109666 Malicious code in tiara-gudeg78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecee50f36a3810ac4459080e2f053e6d80448a1061fe051239121ab61df2613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70219

Malicious code in gita-gudeg69-ruro npm...

Malicious code in remote_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592c7247d6b147dbc86a62944ea1bda742a9f562e2b5977953667ab3699dbe98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756e6eb4a5f91f1920fb3c202ef3d6501ed6535b51a697d1088d658aedfda7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93159 Malicious code in aesthetic_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ced916eafa2b44f2532ae7b62a3b115be40d11ca54bf8f85f471142852c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90565 Malicious code in sinta-nasiuduk8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da168c35a97f72e01d10885f5f6dc8a8fd3c8833d57718754ce5d8849c9d233b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-rangi57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741fbff4d4eea55bf329c65dbb5e087b0d667150ce61553f727ad74daceddcfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...