MAL-2025-185742 Malicious code in balance-char-byte-final-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e865ae1c8a984187cb4dbd722f2a15ab88822dc1ff846b8b0644a317fdc6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187970 Malicious code in meissa-hermes-callisto-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182805 Malicious code in itale-adci-akonolki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821ce9edf45994bcd34969f68a4bf3bbdd374c5c4e3a320437b81aac48de04ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-labiomizaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14642c84ee23eedc4862e92c53d66288e02204231e85a0e88766f2b2f1eca8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179862 Malicious code in lookingan-jaja82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74085e43de1498da9bf4b39aeb8e2ce3128f5fbd2afefd847c92af07c4383595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc797bd07db0f9f91442024db4f6ea40639f7743bc8466dca68d9b48fd7be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142292

Malicious code in diva-turai-inusunaja npm...

MAL-2025-176447 Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172402 Malicious code in hereis-manuic-tauwaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc90a040a286743ee5491f46111163732cd57c14794debb9ac0f1a72c0df17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a62513a7965543020660a935d367adf8ecf9b9c84fb07dfbf3064c615a89e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169340 Malicious code in turisna-gsad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cfbdc81e10028ddcbe09c7e3f514576fbaddea7b8490e01c4b5cf165f1acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-hyperion-juno-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbf8b288371f848df71ed44fa48d183d53ae0aee3876e71ff53088e635592f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-global-hugo-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0774f043ca22cb36ef2e6caaee3ed61aa6c9a6adc9279706a1d01ae83d397614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-brengkes58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b863e44c8a047c675799c2e8fe6e0b85406dd3ec4003ef816096e97302fe8e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cce43ff7e3135e21e10f74dc4e0955932f219cf31e2020f2e9243209e90d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138125 Malicious code in xaver-lengko13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0d7e80c27608f8f6a64bc4595a92a693a8fa057343f027886a5805f939f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-96942

Malicious code in kurniawan-kue5-breki npm...

EUVD-2025-90268

Malicious code in lutfi-rangi51-miaww npm...