MAL-2025-147324 Malicious code in resolvers-forever-grunt-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09265b46fdf433576f41f7f12ba7ef773b4b643027adaa79185d07f1850e0e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139071 Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138936 Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117347

Malicious code in glorious-pink-hyena npm...

Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bed7823fb9b517b425027a57e2f0dcca1a7617958838024f88819fcbe6e50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135635 Malicious code in mulyono-oblok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248e29e57015e16f38d796ebe56bbce5006f5dc236dd7667c00e8312442aaea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jus36-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790c1adefddc79ea4b192a9e4ee91f0b98c04f4339439015bd8337e0b24014b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kue79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83450e8173d44d6ad16b8397a67843e5be8f72ffecff42c358ae14f7bba8720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasisayur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f0afba7875fd9189e704bd3aaa34bd90e37acb508d8dcfa5980be36749d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75615caf2f39bd0b20177bae0c8f173f9c107db2b50d97264ad425db255b7a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rujaksoto64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca3acdd549265aca0d4f926930673667d6e490a736c5d58f6ea289e1db662b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5f0759d641db406890bf6dfdc2f44e211fb7696d8d842463879efd22f9c516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b9aca04a985603041d8e165d3cc904509fc51511b9ef52d0be63b9c059bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ruwet21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63250df8a6c9838e32a0de971a71fff7485174329103961284b593c3b99c166c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6151d106617a16094b40c8709f00b8be375672b5ca39ea614c211d9926c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8427101e4940a45be0375d6631eae889240ecb8e9688e28d1d88933e4b00047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131781 Malicious code in zaki-sambalado88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9212b329b7283740a174342c6ff76af3c0f157b9b51730524a1a9c79f6200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125846 Malicious code in dian-kue54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ab7310be83dcee037f66032dcb5fe973e10aa1d50fef8e4862fc83c2ac6188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...