MAL-2025-94200 Malicious code in eldest_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7659c9a3ed2062778ee5549c90d0bcb003b85b5bc3309499d0c2c3dbc7ace94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94490 Malicious code in feminist_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbd0a14bb05b63b6369339167406f6140d5710fe99c1422aaf9e22cb31db372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95024 Malicious code in inherent_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91178b15f044ee87ddc0370bd8197fe37bd8de7f1255a2a808b200bf3af472c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95442 Malicious code in melted_puma_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1b6dd0d64beee84afa6defdab76e3d97c455ce9117fa872d1f308cdb699461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94310 Malicious code in eventual_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77913e6e97f6ffb573d6876400090f04e80a64cdc06c6294a91c43b1c67cf179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97207 Malicious code in useful_fish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f084a446ebbf36858866cebb2d5f1b6ef6ad84ed1360d48657586f710bec9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58713b97e7393ad57eed758b8ff052d085549ba5638fd2bae29b1a4ee54c74aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tapai43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca93eeec14a114e2471d1250431fa4323e5d049d5807fe03c609dd6fb1f8624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-keraktelor30-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f45afb55d3587dfae76bdb05dab0a549b4839dd4ab11631a4f7096beaca6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-lumpur23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc3515ac2ffd3879606780d0288cda12657629e8c5f48a47395c99ff735b040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ketoprak33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479dad009564426fb650653b0ee16bb58bc890617d048fbe80f41bc99da2cda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce490de6ee5613dd8676115c23e3969f33c0a2b22aa9122e2cd6ae05a2fb8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-menjes19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3feb4e231f7905abde6e6b76dee4bc5d52d61cc083fdba531f1c2f22bb8ee364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lumpur34-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09520a99fec34a78114c6840f770c2cd7f6960c18af1f6de8e1bf1a9a0018edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mangut34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fd1ccc0c8163a368d312eb99913e0ed0ca4cdef2357f2713dfd919a7667e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-lapis42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f1ee7c8f54ae98da24c73a498e55bf06ef54c1e0ba8c1b3370589637656092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lupis59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718d0c1b59f5ba1a418edf812e1f31e8d514b16191918cdb8ad514eae617cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86973

Malicious code in bella-rujak75-miaww npm...

Malicious code in putri-tomat30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5837e546a5188af0c98b02719bdb2408351204b6e62bfbe367ab477a9c092a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b03e8e4dfa737ae3c45c270d0021df4cdb256bdf5145f07f1df863560ea8b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...