MAL-2025-82259 Malicious code in wawan-botok94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95496c5606c62de300edbdce5086044402c38c2c48317f7abb8d15ade512606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79874 Malicious code in maman-gorengan95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62388c32c18c7f0470391dd9228f1f2773081fad61b6fbfdebede4e3b9d029da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82547 Malicious code in yanti-nasi84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064b47657242c7a94b1e0eebc8553d476139b45c6c7119b2a203f51eded60e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77058 Malicious code in bella-sroto93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa19b6d3d38f5da2ee272207ebee4d87c13d507b3a7abe66e826bded21bb45be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-dodol93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a309e53015b9fc2b2cd714703c4be5038c23b2da35e2474295865fc4622cda27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-mendut67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f05773e64318fa92267662644f5c83ba1413cf8d82852c74569ea7c4240eedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75917 Malicious code in utomo-mendoan4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e309510414a808e2b8f425deda538c4fc0951c6c00bf1ee8ae8321034d47c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-soto41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95c853b2cdcd0cba6175c63bd48b03058a8c9dbdc5bf2dfab9d69b32993313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51183

Malicious code in visiting-scarlet-centipede npm...

Malicious code in massive-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cb460041dd6e492df0169b55dc03a4b475a5b3b2fb4f983b65d87373a5b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scientific-lime-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7664cc3f842cb70cf16b511822692be8db17bd453ed2864e4fb9520560d74796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70685 Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71199 Malicious code in troubled-magenta-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa2bf3f48d7718a5c5c105134ee1bc81b46a2c3d501f7bf70e8f33ab95be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rendang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a59240b5f5e65d26922b1c9f23cec7d211bd68715ff551dbc4b9ac95b196d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-enting80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a20a747d7e7dc0707de4c6651a41828324fb0223f8a8686915f9644684a892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62456 Malicious code in dewanto-nasi32-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ee7d03159f340382b0867eb14e8e108f84024f8b7f786d68861aeea0ebd4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65565 Malicious code in thin_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a23cec215dc685c830ec1690dc9a4dcd4ac2d4400d430bcdd91d36ccf072436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63372 Malicious code in hendra-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6f8c4626760fa5e053c14bee95e9b76b95a2c1cfbf9bd01c2d2837d52f3b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...