MAL-2025-115879 Malicious code in mulyono-mendoan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640628d2e4ecbd353e6851d8be945d070b770f97921ad4b4e782ed69e7316e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116352 Malicious code in patria-gandul5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe05b373c65a76752f14287f6cb6bd760ed8e869d5a5c9cead15b6759e11c7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115976 Malicious code in nana-soto69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b98b3c9865048b7d56ed27f14fbeaad0f08225ae24bfc2c61186e5b3ed48e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lapis63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bf56d7440c15a146ef893350448023439e3ce6b280cf80d0cb93e23527d25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87825

Malicious code in wetwalrusz3n npm...

Malicious code in vera-ronde27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b2e2284d74482134d00a5a283af3cd673d258c29f5a89fed0ba59c5bf4e7c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kripik12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f260ccbd36fb71f43298034e6d6d0b60328f17addf4851a31e5c077195b267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-keraktelor28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f789681d3f7a185955f080b923e3e1e0bf113bb65c3cf766b5521afa09f67fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lutis64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94817ad2255b62cb39b4a74f1fb3928fca9b011d860c1879fd4d672e2a3d8994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gaplek95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7c92118feacbdf861f2ad3c0fd2d75e920df3de64436bde9bfe6bf08d28ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543850384619a9bd54ba9403025fdfc40c8219dc90715388fb1c559eda7d606b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-brengkes1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d6b85934e672e9a1ee83e983ecebcd265e869461b1000aa0df24f8d7633094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-rendang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42e9cc1e49ca4a8abea710255d52f9b2cf5756436a2a0cddf06852bd1e2a9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lupis97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d24a318d6777aab6920f7249d9588ebf4a78b80131b31eb8ac120e55e05327b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rangi42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3597b9a0da6287818a98b8a5a7ce664abe13b65e58f20196ad62158fe90fadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tiwul37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb2d6b14b5eb8a920c14863587ea4934279c706ae0121145629bf58d2084311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sate13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2d33564e576554b0dfc12fe3eff68228d24b5d5e2cef58ffd24d830805a620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88440

Malicious code in tiara-sroto86-miaww npm...

Malicious code in vague_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d01bcdfef7ec481cdad7ce5309500ad6e8e7a969169fa2a351e96bd3bde7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lengko45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d77634203b26f11f59f3fbdaf935b5d14596e06ecb7ab524ed0d8a9ff98c4180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...