Malicious code in udin-soto41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95c853b2cdcd0cba6175c63bd48b03058a8c9dbdc5bf2dfab9d69b32993313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71199 Malicious code in troubled-magenta-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa2bf3f48d7718a5c5c105134ee1bc81b46a2c3d501f7bf70e8f33ab95be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cb460041dd6e492df0169b55dc03a4b475a5b3b2fb4f983b65d87373a5b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70685 Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scientific-lime-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7664cc3f842cb70cf16b511822692be8db17bd453ed2864e4fb9520560d74796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51183

Malicious code in visiting-scarlet-centipede npm...

Malicious code in andi-rendang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a59240b5f5e65d26922b1c9f23cec7d211bd68715ff551dbc4b9ac95b196d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65565 Malicious code in thin_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a23cec215dc685c830ec1690dc9a4dcd4ac2d4400d430bcdd91d36ccf072436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63372 Malicious code in hendra-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6f8c4626760fa5e053c14bee95e9b76b95a2c1cfbf9bd01c2d2837d52f3b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62456 Malicious code in dewanto-nasi32-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ee7d03159f340382b0867eb14e8e108f84024f8b7f786d68861aeea0ebd4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-enting80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a20a747d7e7dc0707de4c6651a41828324fb0223f8a8686915f9644684a892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3dcc01cde718d0697ab8c9fd3567098f999f89500c2c95a473cf067c4f6c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208abc7fc46e160809791619d67537098d88dbbef1f9e6a2d184c2f33fffc36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60340 Malicious code in educational_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0226c4485cb69fe1d39ea8c341cb15973b9a3f5febfc01028f209b6a827ae312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-46521

Malicious code in lutfi-ongol-ongol65-sukiwir npm...

Malicious code in udin-telur15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb303f55d138688ac41057fab4f8b18c8268c3b6482b1606e0fc8c6ca16684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-teh65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9408b58cc219a4e6fcf8c3f9bbc514ddf1f93c9d509357312090b3d3eff7323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-jengkol69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040ebee30c54362f1d991a20ea4ee406219a1713a10d54bb9ebdae52ffe508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ketan20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28953cb15b3c392aac20316adcd79f6a25682310348015e767eff9680594e31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...