MAL-2025-65872 Malicious code in varying_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c71d85fa1739c27c96ce73e6f9e4f7951a74b6b7ffadd32e7240043e11600d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62890 Malicious code in fadhil-saguer1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6ffefa8c1e7ee59c3f49dff58462fb7331bd5a9a708815a0c5a9e067791f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64800 Malicious code in planned_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385fecea2fa5d2f81579264e36ac792bd4382dff7689f0f510a5e571d512a913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-jus21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860167cf6ce094323f76e9aff17a999e854ce93e0310db5a9f8fb3ad2801a6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rojak45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749a352879c60c32d7079674e0c63a2f62886468e95aa4d538182d2468d93dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mendoan83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27afdca92f753ae7eaf0fa6fef70e96cd4392e9137968e0863d177468d0a748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-bubursumsum58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a3b53846e6d01393f3317a3f982093d57a63e1a7510c6e0faf2bccb33c560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e9c668401d2447f078702fa506904180d0cbf0f4580111493e755d0323029d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1471695820b4bdcbf5b898640e4e63d7c8ad2b8e5699e10057bb9d833a2195d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fe542b13642c9d0b5abc4f9c540419ce00fd51d41c200cbe6d761a69c74cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c4a39bcf89f686e873a52d9ee9886fbb79578d519d059ca0e0627484f0f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61393 Malicious code in strong_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bdce26e5efffcb64409354c045372bee1f8662260f6684589d8a8afd30afc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60344 Malicious code in effective_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9066d5362b52363cfa655d83fa44ec28dd67ddb9e51435e3b6b3547468ce6903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-oncom40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1a790665d68fa05ceaa58d1427af866b754ec071e577a92928d4c730928da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-pecel67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766740f62b7ece6b8ed1b74e84e5104462b7fa2b1d739db70a34d5dd279db0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-bika87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2019b9136918310ddef2bdc00c5d3a3284775dc787641c9d1f3d436b0569c686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasisayur18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bde3165a0438083c9790270c2525a5562cff3a4d7e6642f6f73bbfb88f84e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tiwul91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef51be499b234be4c3a68bd662421e72f45914153972435422a0fae82f3238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44866

Malicious code in umi-kripik69-sukiwir npm...

Malicious code in udin-lapis50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05572699f75466f4dd4e8bc58c4878ca88d89b8c86f909d9d1d13d428de1b795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...