MAL-2025-108207 Malicious code in rough_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cd061417760d1d98ed3f33062ab4f3a490ee3fe7a905166d98ca7a9240a017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f367e3d39d9f05e8cd72f47c57a536f2ace0427870e1f3e9db10e3eb48d5e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kupat59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35983f77062195dd7567c2cc6ddbc30639da14696cc9739291124775130f1aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429ccf25afb2ce0cbbbbadefb0c2bae8af28a5af121f3b9714d64b66b4539de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103688 Malicious code in hendra-ongol-ongol90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd6df54c4de1e580b3443831dd4f6d90d2f9b226f1180e2a4d80203acecc290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103981 Malicious code in imperial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf9405f17ea3fc897550b2c60ff346feddc45536a3b2cd0be04e0d98420f578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108034 Malicious code in riana-nasicampur65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604eeba7992157d005d3baab653ec074d0d726ca14478fe9946cea09f92a26c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kembang46-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95ff64c5be05d2a51c7956acdbcb999b33b09b52ff16cfa0bd9952f923ca376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed414b0d9d780e9b9d3de5d53a6a9598a27ab109b84a60ac5c62e5ac673d8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_hare_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c56b77b2019e468d628311f719731fc5cd47ebc4f78a88bc5f6cfc57de806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36d816edfe44028d56416e769eb7811e34a17b904d6fcdfe552925d355af755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7de5a9cc95f0d31ff4be76990cf78a18cae189ebf7b067a1bf1657292ec5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65421

Malicious code in adjacentwarblerz3n npm...

MAL-2025-94088 Malicious code in domestic_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da525a58b568813489418b2cb4cf97cce2f24011328f82a6e03315592a984c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93524 Malicious code in cheerful_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7817695357db0dac66662fad36580bb3e4dd6b59339c4c60fd36f3b92202fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36baae6d5b4baee05e11bb9b60995bf62ef481fac0fa327e2b11b10e3cca7e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-martabak7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0768c1ca56737efafe4ab1d2c0f847d4c22bec5a4642334368c6e0db95d755e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb050d8edec6850dc14747940366e3a3f35163c836be02542519e1e74f5c8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87617 Malicious code in kurniawan-mie58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1dcee7d53748bd76383916d5a5a1e35b0d1b2f77a73b2e0b000cd05aa6780f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc756f0bd8e8851b7a4ea7b700eb19af95153ba085afb1474d0b457b43ea5327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...