MAL-2025-104930 Malicious code in kurniawan-dodol24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c4b55ed68d125ca223e5c906b30c8339df3398d55499223f3213e3a42e966c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f7a7a2015d5e720a64f2cba05497bb8ff926712a71629c606bc183a043609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100496 Malicious code in cindy-ubi79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7d0de945f62db748a9bea39702e7e58b11b933f9577f8691493dd92088b9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104677 Malicious code in joni-kacang37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ee5e796c1c1850f60d1578302cf9d699914c38dec1807eac73f24d96c3c02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104325 Malicious code in interesting_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def8c5200750d4145bb67447129fc36490bb18f560863482658de0fa6615e25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6211a2c53bdd3635b89c896393f92e29b3c7fd2e6e62757a9c35a8e50c9a8332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98597 Malicious code in absolute_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd5166d9671b235ca3f992f84668d48d313973d58eb53b133c7fdd9b991cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5115b4ec2a2bcc1c752d004ccc59a334f1977771523b4926c1c0e08357bcc82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto59-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dc39a8542208d850be902c4e11ba7d4c29ff0741dd377128404815a971126b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71704

Malicious code in zul-gudeg48-tititugel npm...

Malicious code in sinta-rangginang10-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bf26e22bea6a357a387dbcc115f5fbc9a9baf83c539916d6daefb7be10268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97147 Malicious code in united_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae45c0677c69700c7ef86b504c166888cdad25b6dcd31e49ba66862b213ba803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96682 Malicious code in sour_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d4dc2755861588fcc514e867682f52ce112afd95914f4ebee2457686167eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94587 Malicious code in forward_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfb0a90316f2e965d7794fed2fe5941e9bdad3203eb78c4f13ebb63211e83d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f82dc6e2168c95093c8ca8d946be957328c69a10f39a50cea0cec52fb9498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1537fdc4cac0f14d3dd0ed70186ba83b03a994402c760feddac99389022355f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26583a8b3dbea6e6073589fa62a535a2f990c7c416671b463c44ca7b2d0672f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63280

Malicious code in literarydamselflyz3n npm...

MAL-2025-96094 Malicious code in psychological_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f728fe10040d29a22292f15dbc6fc19e87eda43d1dc6ecafb8179cdc6cc0dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35cfbaca0eae61947a0930c18bcf20db1fd8e0a34699157b036bf3b9899e097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...