MAL-2025-117284 Malicious code in surya-miebogor61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5654f33c3851409f27eef5d37f6020704754f221fa0325a5fad2a9431313495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-90152

Malicious code in maman-sambel5-miaww npm...

Malicious code in rudi-rujaksoto28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad35920f2357ddc167917226a6811df59149f0a2be609d3d286e9083ab0f909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lutis8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf5d3bd157499137a278d7fbf193fa92b9437cd49c4896a7e4f1079dce4195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113509 Malicious code in eka-botok35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b382c17673ae46fe0682cfbe4d1488662df5f0f48d6fbea908468a41ac1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115150 Malicious code in kiki-klipo93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82e9341956c7d9b0458ebd4f7ab5842be947e4a73afd4bc626be2cb0e5d88cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116211 Malicious code in ogi-telur47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f0a4a6e3cda1fb9f3abd150b11845e1dd0516d6cb9a00ce18cc89e2d303301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117945 Malicious code in warm_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7afb72e9f16e4445d37638d1fb8de77bdb7663af8c33d324003b27f8a45398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116528 Malicious code in putri-bakwan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee46eeeb7ef111585b04e5a4caae49cd234098f3de3a499da273ae31cddc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115473 Malicious code in lina-otak-otak67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4386be76b699745885483a92086d245a4850a1bffcee24b70a761611db0dc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_orangutan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7212dcb17a3e4d14d8784f8afc870855e5c74fca6bc93e5381542d37b679131e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109810 Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_marsupial-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc358be3bdb621ef5306b5a4cf983279447c27d66cb7cd955ec3525cd392c61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110070 Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103056 Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77164

Malicious code in dangerousermine-silentdev npm...

Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...