MAL-2025-108650 Malicious code in shy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1474d3dd978f06ecaa9ce192dc1edde34784068b7ffe90ee33685e08539ba04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111469 Malicious code in zaki-ketoprak93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852133bf09c4c845497d6b949bd9e8c847019e98d8c7b0dbff1418e2e718e031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110402 Malicious code in vera-miemee32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd132b4622cd4ab2277435c48d8ace4227b0d53ee2c6006cacf3f4539838ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103024 Malicious code in galih-donat35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a939aabdacbda08ddd071b6063836c96b4ff58e81112963374f29bd8834ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111502 Malicious code in zaki-tempe62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0435c05dc7fc7a099fa05d0a7f8b7cef5279a5193f5cd16a39a2355c43b6d163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103658 Malicious code in hendra-gandul97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b3ecd93466f6c7346cee6d3dc53cc910385c4e590815749b002e23d3e59728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102198 Malicious code in erwin-botok9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf1552ae5c97e1bdc75210cd0a61725c0c731788f0f2a2c233184a25ee01aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102761 Malicious code in fitri-gulai87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb20125264aa75716d38580a8066a29e5be368b47a2b2f234033916a182fb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106639 Malicious code in okta-lutis35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d045b705a2e344682252b124cfd1dd26bf2fb74c064d497afe7e7391ff9b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103026 Malicious code in galih-dradag21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79801e4b495f75b5d3059fda823ae3aa7bccae22d8399b2535eab8ad4c56e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108536 Malicious code in sensible_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4053ee9ccfd64df6d86a16dd8d0b6d7705a068295b273da9fd8bfdd37593b623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111224 Malicious code in yanti-teh48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3598603833fae54fbb54e5a6a8ad31169dd9659ab702fcab5165d4dde535608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108767 Malicious code in siska-lumpur51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3b56bcec607e60fdd1ca2ad94c2923ccd1ffa2a5305125a5c6e5364cc4fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69960

Malicious code in hendra-sambalado60-remi npm...

Malicious code in dian-buburayam64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c5240471a92bb15e8e3c6abe5dbb518c3ba045c87950243f07cd9507239f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-taiwan85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b95b6c66cd0f2d09278a949552d018073e63ccb757bc1e35a48710de1407224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-nasi15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7336c465c819a0e8cbb387f3e5b51e882d0c364c9fd72ac3f1f170380cfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76250a16a4745a50662f42df310ba06ebc3e17fbfda817ba4ffe134e4ea02ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tek42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455e87be682100ddf0b0b3588690b7f416c403d60ce6278ebcdaa2946f26502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b462f1dca276daa655d11f5cf7c1eea86053ccc68b031c9611183e2843e565c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...