MAL-2025-90978 Malicious code in tania-tahu74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e34e1f1995b570626f3277a8b3a7a864d68b50ff8de47f01ddc16fa81146b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92532 Malicious code in yanti-lupis90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c857716315321d129f765445af164409c965ba3500a62eb743817ea73b16dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91413 Malicious code in udin-taiwan5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c8fbf0ced2c07d69135e0a137f883db3ea47d0e470908fbaf22ecff146a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90343 Malicious code in sari-enting88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab7971bbfe8fc9cdae204a6c6e72effa344ddd2c2aab049e84bdad5179450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91615 Malicious code in utomo-papeda59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e19084ff552b0b71d8fa836e9a43132fc4ba37335546784364121ea39065821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91513 Malicious code in uncertain_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe363ace6f0c4162fa0046fe0bf6085214fed9a647584e1231da4ba9e30f023c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendoan22-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74f820b3471e7546e2b9fdc60d8d128cd806cfe7ad0b22bf13d477e9b3d62aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-peyek73-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a0083b95c9a0d091cee23730807ff2a82b231178013a4865253b12d0186d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84670

Malicious code in mutualroadrunnerz3n npm...

EUVD-2025-85235

Malicious code in kiki-lapis53-miaww npm...

MAL-2025-87754 Malicious code in laila-telurtahu36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034efddbc776e471e5f9d0f9df017e5d09fc14af5b3f9ee4699b748f3e2e454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90814 Malicious code in surya-bika4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8bf49871b1eede82eb385d77a6a0438247de4dd67265fb854481771bd85cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90759 Malicious code in stiff_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfcc4283406ddf327e5aa5dd0a11525ff3610f87e1ba31a6ea04efa35bd213c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92819 Malicious code in zain-papeda66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f061099113d70aa3d4d09813c8d910950c434b2641a4c1f3bcf2a49aeab53d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90912 Malicious code in tania-bakwan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b2a6bc926b20ef44bc7704ffbd4eb9c89bd4be29cd4dcf02a971908ec467b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90900 Malicious code in swift_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f8e6eaef87314fa6acc83e8b5c63002a89bfa1a22c1fa46af2634c82597d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91235 Malicious code in tuti-brengkes65-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25f58b5e1b1b52c9dd3c757018341af9293daa60dee7b36d181bab338a6581a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91520 Malicious code in uneven_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de109694b2e94fe1aee391ada262544cbdae527de959776afc7443ea5a944b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87390 Malicious code in kresna-brongkos1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73db9bf4b8fefc36231554be7cf80d54899a145d8cce17d16713a71d335c8a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91069 Malicious code in tiara-lapis65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fec5d2afd30ac7133dfc80ced5d21f50a4431466e668d2d454adfd6ac5de86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...