MAL-2025-118105 Malicious code in wild_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7decacbb4c078f5c66d582c8f2e8eed09260624bc95aed9fc6f2fd1cd9e11db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115385 Malicious code in laila-mieayam4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de0b8be5c7c4de1f2d70e542d095c60efed630722e4564be29368f09948ebd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-brongkos43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d069a3d6141689a4d9228eee864b9a20a5048ad917b4f4a9389e746bc850a9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-klanting19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74b9ef6a3f23bc49ad9b359a5918adad5408b61b3557df6a4808c86d6772f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-telur50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad34c386584e95c8e49e0e1f809ee991b4c902383a00e049b42938eba6bf0bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gado-gado35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a81516fc035b7e1ba59a60a414e65f581c287a63cce773cbadba31973a17dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rujak55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067dcca9bb86e545fbded8dff8d9ececfc3260dde11f8c04450c9e0d57c37782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-toge38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823c92e2e24be2a86c7ca21417ce7af6d51d6ebbfdc5f0372447b495b3ad3fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tongseng74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30a0e3f443dee59f38821b82edec576e8c668e23c444bf24fd1be33bf29e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-semur78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4d04aeabd02d8010e55b51a7650b2c7fc6af5224b322c610b63b6f5a5eefd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f37e87ca8aef6aace7b62e8bfea008623500851a693e05129ff9e6ed14cb8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-soto98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e36539d7526b30054c3ccfea900344afa7989fde210becb4d4d6fc143220d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-saguer60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426a4b809f3d1c26f144326ce7621616153799009a9615669043c2948bb8909e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klipo63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87eb43c35aee665aeeb75d40d635297af98846c307c2f0e2ed5c760902cb1a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-gado-gado17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d32e38ff4bb7471b96d6d8f78842bd906a8a9e8ba56cf639a0b5a874db71ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6407f65415f7e43a36d705a310fe15a56237e8cb38d3b809bc26a5650e019c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangga93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c7bc633ed2373326428c6c49959010f7e14510c5f4ac8d48c53921c339058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93138

Malicious code in automaticsheepz3n npm...

Malicious code in dewanto-nasisayur42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d81a5cda8a189100571a917b702cd17f62e9ed8460a1c16551d99a2f7dd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sroto25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8b39cef4819ef5020dd3f3e2656af428938c6575814c5614148e7d3d66f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...