MAL-2025-117251 Malicious code in supreme_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2daf0adcea88ddc2cd4779fe679f389f57f815b3df57ade77ebd43cab861f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115612 Malicious code in lutfi-pecel61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaaf92647c1eca356d4764f7d3fcebe90c4344365ba5eebd636631fc11262df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113538 Malicious code in eka-peyek57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37612bfbd8083d27a532d23d5f6bdc97c0e86cf5f2a86af9c84a41a7c105022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113116 Malicious code in citra-kacang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0159187c91e19df33d93c774af2c8052e2a3949eb27011a965e2e77dec26d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa65578ef630cb234b3e94d045cae16b7bd60b502177da1ec1600141483604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-moci78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123a8ad3c441fa2f81c535eecd8e08132f937acb0ce108228108cc55d157f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gaplek95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7c92118feacbdf861f2ad3c0fd2d75e920df3de64436bde9bfe6bf08d28ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113822 Malicious code in fadhil-oncom7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae21960e298aefd6ffbf75a52102a555781d902246fa66ae6044eeb73d1d28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114874 Malicious code in irma-martabak79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7489391a2ab6cacc25fe06bfabebabb2f826ec99a598028a083c74769c2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113917 Malicious code in fauzi-dodol2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66ed7f2075bd86d831f725830461b9dd5ad704591e00409a6eee9787626a74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118058 Malicious code in well_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7489e49d2d822fd5a50638957f3727cd9b548ab454a06ee4c89edf46b7879af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115122 Malicious code in joni-ronde67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc55083bc5e459540b6955aaa0a30dc8577fe1343cefc5bb35c1722ef41ffd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117001 Malicious code in secret_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c95a80a231f66c21a44fcfd821de75d30ed7df70dbd4733db88ced3df63036c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116312 Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_llama_purple-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208076eca32696fe87340d3596c0b028c07ad98c3a4d6b5fd6391667bbc5a1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74880

Malicious code in asleepbeetlecyan-97 npm...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...