MAL-2025-91992 Malicious code in wandering_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5b2d5add6e9d96199ae6068e52887e651126755fbf3c5317be90b0f3f10bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91413 Malicious code in udin-taiwan5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c8fbf0ced2c07d69135e0a137f883db3ea47d0e470908fbaf22ecff146a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92747 Malicious code in yuni-serabi53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e01720270f06879c5f1fdbc3d354d95b36c2a931fc74fe954cc2c116173a108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85017 Malicious code in eko-takokak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9b856e9701cc75a5b2810e04649b6dd4a0b1d2051d5c59ef484f00482caf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90355 Malicious code in sari-kepok46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c31436bd28812a9348a11db468c42a9fe6531e60eda1e2e6d6dca305864e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83531 Malicious code in bayu-mieaceh28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83cb7c3fc7165ee2dc22c65fb6eaeacdaa9c1c61ce99d52d8e0f477d339778e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88488 Malicious code in mulyono-kolak98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0b504493db0502e8a6aaad19392741a6768737a4cf82b3c43a9d651f1b120b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92440 Malicious code in yabbering_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff7ead13fd96b4f46d0323353f818748c2f0fd4f1219967ac8f2d4a40640633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89530 Malicious code in proposed_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1121f9f4ab3b9fa97cb90a592aebb263d89b5f394659e076e5e2a1e2ae5883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88411 Malicious code in medical_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc5673603b73bf8576e470003268c3c924c5cb132e36a0f468e026b83921fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91513 Malicious code in uncertain_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe363ace6f0c4162fa0046fe0bf6085214fed9a647584e1231da4ba9e30f023c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-nasi13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00605651b70a62328b0fb2946b301160433a4237bf2dcc4e854fde497f62f0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-nasi15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd21ea145186abe1cbc216ee9b2b73bef8bebe0256f3e2ac323dc64a18e77ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lontong72-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4949e868bad7b716cf01125724ad367e4e8d25638943a9a5c69a68944b6bc9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-oblok33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfb6e60dc5211ef6a20a8c3d49455f09e9978b84435f8a6712bb174d8fbc3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61100

Malicious code in zul-donat96-riris npm...

EUVD-2025-86248

Malicious code in erick-rangi33-miaww npm...

Malicious code in ida-lapis11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713a1bb11a191fe1612ce707997aa7d49fc2e8b2c6155c2ce2e2adb9b779571e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-miemee66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b651c27c07b3b6458b4a8163ba52841f1560519c0ac71dde92cc40be0672a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...