Malicious code in outside_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfb6f826a2434fc380af9550887e880450f58f25c8d66f10d167ec80609b4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-miemee24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79bbfa86642ae667a422ab1882fc9e511497f6a83b6575e4bbdab0d0bf282a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-donat45-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541c3752513944bb29b9f649f8b7681b8dc20d18b87601658a234d083bfb636b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-serabi73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4c8fb32532082eae99c8fb51a2eddb5d88b40618250a59937449cc9873b398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496f929a0439b9b94a97e527cf2c7c76a989d6204aae8cea84e12507d5b47f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gado-gado13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a5af3a652fe66f2cf30d46e56acf616b178ee4d5c4fb6b352500a1baeab7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69960

Malicious code in hendra-sambalado60-remi npm...

Malicious code in strong_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103cf86e822e170c2696b05c76fe9f1c919c8a2260de8a2d9a35b40aab88ccc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0163caa997aa7475c087c9eaf10a15bc7e80b22122e7d81e47d5444c15ab80cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-keripik76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd49737660b12d4f7c8d3485c8ed6d4a80d35df845d71e110d51338d5ce7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rujaksoto4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bb985b71cb4c12ff6987f59562ccff672f444c23635c547c9a5a0cc5cbd5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-teh48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3598603833fae54fbb54e5a6a8ad31169dd9659ab702fcab5165d4dde535608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6b54ca3e73c55f512360afdd9b9a04290520fc3c6d425e5a615f9cd883e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89f142b637c61afd327eabedc3ec3e71c714038f16fe3b809e5bb05ead7f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-brongkos66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1ac1024f6df5de9161957260bb8a7736af1fa59726b6bf176fbab1676a210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04911c6d758a236dc3996b90b67ec096ef60ffe1bb3098c1958de402d40cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ruwet23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0f4074c66f00d49109fe593f18e9dc013b0e3cbaea7f8c249537e528f0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83767

Malicious code in utomo-rangginang58-remi npm...

MAL-2025-106639 Malicious code in okta-lutis35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d045b705a2e344682252b124cfd1dd26bf2fb74c064d497afe7e7391ff9b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102198 Malicious code in erwin-botok9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf1552ae5c97e1bdc75210cd0a61725c0c731788f0f2a2c233184a25ee01aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...