MAL-2025-120020 Malicious code in fauzi-rangginang53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5f24d4898f6a944693bd7a02dd9b9729504a986c16d3f784808b9dcd28f3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91011

Malicious code in irma-martabak66-miaww npm...

MAL-2025-118450 Malicious code in zaki-ragi51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c051738473b6df538738f13f7cb05df38b857dfcd172011c09dcb242de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87493

Malicious code in zain-lupis70-miaww npm...

EUVD-2025-88535

Malicious code in tania-menjes59-miaww npm...

Malicious code in fajar-buburayam70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cec98ef4aa10786a14f2294c429604cc983c4a528c2e4445b763423dd110cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118531 Malicious code in zul-tapai86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71719681f5c417dfbe8ac5680cc8bcde59a8313dfe6fd981d654c27204c79107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109963 Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100684 Malicious code in coloured_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59d53f9cc32c19c6fc0506faf401540efe863ede262a6d12211b50bcb8d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d881cae06b9be274e9b2756057eae9efa28756e9a80bcc7c76602cbf50154828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109022 Malicious code in splendid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1905d0b2e83e6853527477bd779f3289d08bf0aecdd8835c1e7a176c9970f111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bffe92de50e0bdef22bd91d3b9e40fab10e268f37e2e2474029098b4a1578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180c4ad7369409f63785b8874c39268c336caef3b5d3f7ad59bf54a35e777c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d735e9eff8810a3242fbb35afe3c7c58677bc7de1b02ee135a18941b05c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108207 Malicious code in rough_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cd061417760d1d98ed3f33062ab4f3a490ee3fe7a905166d98ca7a9240a017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103981 Malicious code in imperial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf9405f17ea3fc897550b2c60ff346feddc45536a3b2cd0be04e0d98420f578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103688 Malicious code in hendra-ongol-ongol90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd6df54c4de1e580b3443831dd4f6d90d2f9b226f1180e2a4d80203acecc290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93524 Malicious code in cheerful_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7817695357db0dac66662fad36580bb3e4dd6b59339c4c60fd36f3b92202fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed414b0d9d780e9b9d3de5d53a6a9598a27ab109b84a60ac5c62e5ac673d8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...