Malicious code in steady_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa818affcaa219c16b3a52ef4009cd624923f5a0ab9861c1b680d4731e5d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94720 Malicious code in gorgeous_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd75e7898c29537766bc5bacc84d221d0f22f44d0bec933d50627740967d623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95228 Malicious code in lengthy_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e82f75299621acf09cbd9b48803a86710f50115bb2bb4beee256bccd89bcb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96388 Malicious code in roasted_vicuna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5a5d0080204aa4ffbcdaee00846c3943674f88a4c64444889692ed616622f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_hippopotamus_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f2b73631e2c7b11f3d697bc5941793341a6fed55ad16b47eacac4eb511f28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6989af0d9fa3d95bf68de217d2305f10906c63771f043e2033f8384ee03e216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-soto30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb1a2402cf7a1c15c9eecb2500f44c54b1a3856ab3c8ef50672353864f8c8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67709

Malicious code in purerookz3n npm...

Malicious code in laila-keraktelor30-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f45afb55d3587dfae76bdb05dab0a549b4839dd4ab11631a4f7096beaca6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b3611d65b39d9f5ae25b9bffbbb0dc5e8aedf5c5f63665851a6a03b3855206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mieayam47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb8350dbe5e68d2e134b1abfdc85dc67d74fe0da90c3c5a2bc2dc6fdf4cc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lumpur34-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09520a99fec34a78114c6840f770c2cd7f6960c18af1f6de8e1bf1a9a0018edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bakso68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b32347df4dfe3a3af6fb5ebb704e49818583c8139a99b0033963df135757e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86973

Malicious code in bella-rujak75-miaww npm...

EUVD-2025-67821

Malicious code in patria-ragi4-miaww npm...

Malicious code in tiara-buburayam90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e48f97ab72322aae4f556f44252198aadd36264853a4b9f62631e2f88c8a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-esdoger45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805dad4ffc8435eaaa015ef3d25d924449a47f4c7ebb52969d5dfd13b4cc0040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-sroto43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b9bdc285b4aa506dbad96bee98099f6c15599c09cbab73bde8c769b00b9802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8709d2a2beb48cde0afbd524b2c18a58124767b889b4b3d4201416cd33c67515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91895 Malicious code in vina-klentik66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72c78624e52ae1185b3cc96e1c0589442d1a65459e16c7cbbf3049b3edfbfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...