Malicious code in small_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb050d8edec6850dc14747940366e3a3f35163c836be02542519e1e74f5c8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87617 Malicious code in kurniawan-mie58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1dcee7d53748bd76383916d5a5a1e35b0d1b2f77a73b2e0b000cd05aa6780f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc756f0bd8e8851b7a4ea7b700eb19af95153ba085afb1474d0b457b43ea5327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a060a080ae07aa514703cc6990cbdfb63f69e2ed29101156a6dda62ed4f788d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-miemee87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494f985030649d9c0988d349ff5bc13ce664dd67e83d258d6532dfa08c083f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89342 Malicious code in overall_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83940d192f41bf0b5edefe6edbae74c8a3d20f955cc86221543069337c556b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87198 Malicious code in joko-ubi77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c3528de8120dfb8a826a7d25e2a862027383cdc58a89dcbfc16de87669a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87163 Malicious code in joko-sambel61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f347e27de8d7bbd4e802862abf983b13158233a59548e80590ab1380ba658b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83011 Malicious code in agus-bubur36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7399c26b7ae666c9dd76ade48aa76c1754094419be5684dc114d102d5c83b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-semur31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e905e13e252b4d3a3501cc9937d45938b0e8a6d16c9d90c9d92c9640d01f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df06d567c2b4691516d0cf5bb48ac9fa84dfc6c51ad4bbca5cac9187b753d842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90799 Malicious code in super_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1535a47504390190dbd7ded71bd11fb92675f03a8a6b534f1467cf38314342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gudeg28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2b0d4f71c7cc36e454518f994b5b127320de71775082e7cc818af46792bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tapai50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc719e9d6554325ddf7dfe14b1fb60cc8f5e69be91b54a2a2b221a0d793188de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85604

Malicious code in ida-kue48-miaww npm...

MAL-2025-92878 Malicious code in zaki-lapis60-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4c9947ae3520f04d04f4270bd4d2c9630dca55310161ae486b39a76423226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-miebogor67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8529b3a9a6c7349dd299d40613e2edfe06665de425b1451107dc9d78ac8f6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316980ff78d58266fc445aa223c927a13283d3f3891666ccd9260d80b345d2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dodol78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e51e3d4fb18a59f19216fed2b684b4cd8864491ba7c4e562e48ac01cba3ea03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-keripik13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac057617331afea50cf59e19efd8ed6da30e27a06daf0a1108cec55a299cbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...