EUVD-2025-91011

Malicious code in irma-martabak66-miaww npm...

Malicious code in serious_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b9634360adf6462319daa7f8e34b19df02fdc805bcfde00da78c965dc3cafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87493

Malicious code in zain-lupis70-miaww npm...

Malicious code in fajar-buburayam70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cec98ef4aa10786a14f2294c429604cc983c4a528c2e4445b763423dd110cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116365 Malicious code in patria-mendoan58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24eb9014e107aa2e6002615fb35646c1de283e25c527a2f6181c9d4856844bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88535

Malicious code in tania-menjes59-miaww npm...

MAL-2025-112633 Malicious code in alive_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c761f3a5ef27fd0f97feea3b881cbeead0ae89857f61cdb42a9d43e620cd38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115609 Malicious code in lutfi-oblok34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602c10b66694dde8f3f02a92af0fca513af60d7ae07cc63e3f95890e56cc52e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112806 Malicious code in bambang-ubi66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbc1e24ac947897cb2eb1ae24bd14817ee202ee150bb506f3dd1877cbef18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118450 Malicious code in zaki-ragi51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c051738473b6df538738f13f7cb05df38b857dfcd172011c09dcb242de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_beetle_chocolate-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9afbb9bfa21a794fd082cd5b19647354b08b0d988ed56f5c61103770c182efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_goldfish_tan-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cbf1d50435e7fee81c2433bc1d0029b7b2a6fda2701085687363610fea5a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_guppy-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de40ff7899ef11b8386da46df7661715833b2ef90d0f76171fb3dfdd3061f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_thrush-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95a25651ac4b632c63e2daa34fd8cbe332adc5bd887c9fbf640a30f1e6e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109963 Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108163 Malicious code in rlwqqf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee43cc2221f039243836c072a41ba87acc4d1639028c2d1cd05b69c5cd82c2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106908 Malicious code in parental_guineafowl_beige-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d13abc4aa6826ff60433d4728a3b31391742f39a7241b2dc85e8595b2f1f5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d881cae06b9be274e9b2756057eae9efa28756e9a80bcc7c76602cbf50154828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abd90b48b594f95a3f9d2d894934335a8dfb450a2f8636148f1d3d3d8c9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...