MAL-2025-131402 Malicious code in wrong_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d59a9cb8cc8ff3bd34144e4bb9f74fd13879ee74f8924bff5944ce5c1c153e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125749 Malicious code in dewanto-tomat40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c00bc0d2e9b8bf6be498c2e7c2ca2a9e5cb3337a9d685df20d8b2666cddf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128043 Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mangga41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01940624220766fbc3a932e6659b0116dc599319ce2764364c5accb3936675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-serabi7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef7fbdce46f496794bad83759747275c475b82c755a4693e9eb372113e7207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gepuk93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b94ad983810c9cff80a809ab4b30e310e7521dd22c3a2f156d04611c60e1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501f14806a94fce4f5e3f96c7294e7c81e46b5136cb22a9f406e94842db319d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tapai35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e8cd26a39df191bd4af3e80d4831c5d1d1751046d807651a0537eac533b401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lumpur4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee75946c8c1abfac67e90700ed95a13fe0119ab44b34a20375dc382476ff8f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95928

Malicious code in oktafian-lumpur73-breki npm...

Malicious code in kurnia-oblok2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe772f706efacb6e9de6ac1da8f2ed06f521858663389cff30a029d879a0ea78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-sambel58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e75e43b623e86f3db1fd33bc7f76726905e5e9488fd2d777a004732782230b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-brongkos35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a936fd30ec752e4fa450fe502e5b8a3b8eaa0674e8a1d6c481e6721a396994e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-peyek20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125c7f4097a93723e116cbe6a045de456676fbcb0ba27afbec9339ff51c64fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-botok14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9274173c4d0a7c427bcf7a4da6a74624bae3615a17b7f03741b018ecb4868ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dad373db8b4d7e5b4377d739a628f7d90f3f0cdee9730c8a4aec84a4e32d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fa6873d69c5040291be5646dd2d0e327de6f6bdf6b68b00acf23a785c7a84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94761

Malicious code in tastyleechz3n npm...

Malicious code in mahesa-tek55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3e16464f978e346707c84c17e58cf4451b9013f0f8acf9d3423b3d89fc646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e220f2ce13c012edc769111d62f3f8aacc711a20c56c0cb9e7c112ec67d1b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...