MAL-2025-84648 Malicious code in dian-soto67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9792a5b954454a822de8e531642bddcb91144e53caf114d4dc2668be096f1b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82991 Malicious code in advisory_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2d353ce5d34c20beb5d1b6d05462a534694c8e5cf159aecfafa98b4d099b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89158 Malicious code in okta-gulai74-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb71019b3c906b67a37e5be58f48d9d0e14e65761202a58ff98c3d1036508e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88468 Malicious code in mulyono-empal34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc647b828a020a57367970c6e05222070bf23089065262ca11f6d2212f3c9377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88733 Malicious code in nana-tahu6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e143a51d3cfe3b549fc2dfd0b9b890d5b56d206b37a399ce302f4613fc4ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89595 Malicious code in putra-rangi99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a9f78683854ec75749d8f12404999acce047f40544198dc3a100f577fb1a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85304 Malicious code in extra_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a8d38f43b5ee2dc8a5407e279b57806384580a7207e001870b4e448504fdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86392 Malicious code in hendra-keripik65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61841e1f7abaad0bf8a877ec506807477da3b7a63c3144b716496f19264ad293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83666 Malicious code in biological_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211112a27adbffd6f098483ad1e2dbf65abce85c54166737006a0f82404212d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87946 Malicious code in lisa-nasiuduk4-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85bc621f519af14b4ab8f16f3d193e2ad8456676b36112723a3f6d1a04abc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86816 Malicious code in irma-rangi29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670959244fb3ba6adae5bc37f7514fc3e325fe70382f1d0ee1094bb8a7bf4289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d2dc6124b7f75efae7d3073dc5bae1eeecd07e77ca0ac9b8dcad82e60e8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83133 Malicious code in andi-asinan29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01346710225176c341b1c41651602113e0bcc5637258065a04fbbaf061be1dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86805 Malicious code in irma-nasi38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d546f9b1995a71a60c6f1a8fbc9d730a644678ed929281ac6ef5d0e8da4b1293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82948 Malicious code in ade-rendang57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299f6eb5dd942f0366bbad4f2b351e4f8d5fe2eac1f77a2f3be2b60ecc3fcc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83470 Malicious code in bambang-tahu23-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19c897428a33bc94e50b8c2271628123986634a1dece1e970c80fe2cc2ff498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67709

Malicious code in purerookz3n npm...

Malicious code in cici-tahu76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e8ee0977d1a7f111b0e90946d2b05fa3afa396fa158f89efe886f412b11551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lapis93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dc66dd4dbe65a8a3c8c7387c487d9a631ceaacd2601f950f1f069e759bb431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lapis70-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1e8a4ab1c6bb03aa0645eb632a6f5b95d55c0b1bbb00a1b179d4f25ec4b78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...