MAL-2025-132635 Malicious code in cool_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6e40e3e4fa57bf9e3b675e7f2bea0e6c507b4c3f4cdc6db76296d4cd108ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137838 Malicious code in vina-nasi59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a245eae98ff2f3c284cd66495d6641d10bebf38de66263c9905da2fa951be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132815 Malicious code in dian-kue41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8abf70c61b7a5f0be7b739cb1dd318c705f687761ca90d68a83b6828cc460eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134617 Malicious code in joko-kentang26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60e23e15ecd6c7d96a2ef647883e16ac087dc609a2b3f916842453a2aabbfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132127 Malicious code in arif-tomat36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da7cab8100c89887cda0097da045152b8b9ff8af5568e16eeff3d4bb7fa17d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133359 Malicious code in fajar-kemplang46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac1a1a3de83ca2c9e31d13be2b550167f8873e85d3b3230aa9b8f2d5dedd511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134674 Malicious code in joko-ronde7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64e0cfbb1363d2f27b7775a6b6ca96efa04a67182fd3bd6af0d9ccd9405a22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135236 Malicious code in lisa-lupis96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf70685b8c7e2a964ab60b682350fc43a5439195e1b14a29f10951c90255bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136899 Malicious code in severe_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd0cfb36f63a87f6eeab41d83ea297e4b55d42ae0c9143d25d201b0d316e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kacang76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e1998ea853423761a4192fb1821085c48deac82a29661b7e3ac5105d897694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101311

Malicious code in backturkeyz3n npm...

EUVD-2025-99880

Malicious code in dewi-rojak3-riris npm...

Malicious code in mean_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd7b4fc2446b9a6bdddf171d85ed5ce0924f7e89c1e01312893ce34b1c52527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lumpur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7c1eeefa61c1217ef826be633d68c77b81ada7c25a4f168cb22c4194fe444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-getuk56-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49fef3062dc6669dd17f53490731c827924160c3bba86033e35f31f653f2ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-semur37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a433f268651a41b71c65626ee1f5a4314c7657acf5972c846468b075aa4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-semur90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61b10bc9ce4f373fbbea1a1b2b6103cfec073427d3b3935d924f996779ecd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97910

Malicious code in irma-rujaksoto80-riris npm...

Malicious code in hendra-serabi67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8da8cef1aa3140c754acf372c1024bb58488a41c3c91156997f9b69fc9ea74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...