MAL-2025-109310 Malicious code in superior_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fce54b588e315fc690089e4266221e63ba981477ad3c0c15a0c9a1eb15f3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103864 Malicious code in husky_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dc90cdff3031af3c92a63814c9d3fdb3608b645891408d07c47146f2a89d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bece4adc0b44401a4198df6b38e73a5d1a3ed4c7fe887856cc1c0a498682e7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103828 Malicious code in huge_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9683c9b89f76a0ddcb111532aa1b9c1fd3624afedcda5fd14854d1ca09638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109268 Malicious code in successive_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea9df82a3b243a936e992fa3d4044523d9c7f82397c41241937fc8264c98ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105728 Malicious code in mean_aardvark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a9a05ab8baba5f2975915d15b23cdc72b06d5d6c26dd99582afdb7fff2466b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-serabi10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3225b6e2a7cc29ea63b807b079101abc24d158f2eee6ab090008b27d8c3a2640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-takokak11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3ab7288cba42f74c8487c23d654b2faf80d426a63bfe6b1dc89a1bf430a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110692 Malicious code in wati-kue15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30d6d717b32265c568b10f53aa89de6edad3318c321d7955c48d9a7053ed1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100417 Malicious code in cici-empal92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4676f3ce8c3eb8f5122f951b397ea6e63be46cf40c7b25d6a96ba8b8e3068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-pisang70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cda79f3d3b802529e75297a4d675bf37612b3cbb86b89ee43c582ee196d16db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103537 Malicious code in hanafi-kupang44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f1379700e7efab035253337036473370a7a484ffbc763251d44e75983ad216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-rangginang25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d1e1012385a9f611103f6daef830edb86fec093c40afd254624241f92ff6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f9f8f70567143b5b60e52e70331a45b8bc1e20e531d6658693e5b941c57df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104622 Malicious code in joko-naget88-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48b70a6008ceadd7f246d782d3fd0ce71e4fa8fdbb0307dd979f3a8be4f7fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff778c62daaf1fca293309da661963b62d44d3974f05906fcfbb46a8d83bbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72333

Malicious code in iwan-tahu84-tititugel npm...

MAL-2025-97641 Malicious code in candra-tek83-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4f2e663c1f99644dfa2a569bc72884e425f3d99aba49aa2ea15a433267c4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98509 Malicious code in wibowo-martabak63-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1c578927f03fac3b73d6cccb397cc5952a059254708a0e0cf3e989857374f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d92b5be58dbed6374edd6c4884db71ab0e85095a0d1f9611c4e521bd4c6e0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...