MAL-2025-97648 Malicious code in cici-lengko4-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675e940860cf80b2882f8438fe7161fe1bc51586817b3168013af0aad745f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98288 Malicious code in remajasubuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1484c718b38d4259601bb04653d1df6e82e4100d78272817bc2e4be75a8848d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97841 Malicious code in gecko_plum-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316cbb7824adab770fdb456c9baee5255a9fb464e488f46d193e340b2e492054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98304 Malicious code in rifqi-ongol-ongol68-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43331a62b38db1be5052487a15aad95d52ce3ea518ae786f082fd7c410548d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64775

Malicious code in continuouscatsharkz3n npm...

Malicious code in chubby_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2c23ee18c0e1afbbfce017ef759c57abdd8444682d29be5c253516a883e0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8adee814824a367f05fbef98b9f2abd0da71e7fa836df1f6411a228d63a454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ff362180c826e1b3c22df7866af7f9bed697163c12b4fcc5c2f9668edfd94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89469e4af107cde05a921e4110d674965d83fe86ff98d8abd44f0cba1d094507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d6a662e9159b2069c0519733aa1b8876e28d3f88b872c82fa69c7caf313a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca24f9f4e5d5255b3303fad1a36437b40473181aecf2f5c51e8f40151f2a7564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_jaguar_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0384488b2a6495c822e5c30f07d01c0661ed809fe45cd995d3ea491cd9905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_chimpanzee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882201c8f8b21d216f18cda236edb3e9bf11f516cdea3fad46dbb6faf45acf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18e1ec63705cb70234135c76c12f725c06fe699168b12ae5c34447cf0b383fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab302a43c48829055811be8425d1cdb34ad04c1756624c3dc73f35509e44e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765749bd0f066e7e48660ee2e4f0ea6a353d13400d1b692568bd5f970355e21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebd18c71b584c1c2911dd1ecbcc6a1939deef1f54eb0a40f610373bc2de129e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95588 Malicious code in national_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20f364421058082481a9c995a0357d4c69786a46f36a7ce9721ae20239940d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93409 Malicious code in boiling_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b867464079d77c018634842acaf906af4945011b2fb709188887dec3b9f71329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bf53de56550fae1383f3deb5a95fd1b41208ff20080b92d9d1b03cf3fa9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...