MAL-2025-115985 Malicious code in native_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a8786a58f808086f10484ffd4e1f8f0e661bbb4620f01ebe027de004fadab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76799

Malicious code in functionalmagpie-teagooddev npm...

Malicious code in fitri-kentang65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e971f82c542b4dab97f0c737b550e98c5a84b157969819e2a66bd0d7bb0d13c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592c7247d6b147dbc86a62944ea1bda742a9f562e2b5977953667ab3699dbe98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93159 Malicious code in aesthetic_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ced916eafa2b44f2532ae7b62a3b115be40d11ca54bf8f85f471142852c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-rangi57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741fbff4d4eea55bf329c65dbb5e087b0d667150ce61553f727ad74daceddcfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83724 Malicious code in budi-klanting1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063c042bc3329748d21c174b7f3697dfb99ce30b4b59d03bd784b2b3551e34c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujak75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41de65bf41f0b2927fea2c21441e413cd45ae63fd43cb9aee41b3c9cf89f220e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67041

Malicious code in rina-taiwan50-miaww npm...

MAL-2025-86248 Malicious code in hadianto-ronde34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ca64288c55c6ee654cb48fca49febd04e85b0f57ecaae8ed93276d86d1581d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-miemee74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3470595ca5fe7a37a268cc4a907709b046bbdb11ce581ca5cfdc03a2e8a8d860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kacang92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042b58a603882670651bfdbffcb5620d38b9f89128c176b76cc2ad9a736c3865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-kue36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27297b2b3a010c7e8ec9a1dd475507bde931d3894b0ab2e8858f7dd3e94b956b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53328 Malicious code in maman-mangut31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23e7173dc0194df42cbecf6d303141f9a070aa5e2e2fb0a524fd927ed11bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-45935 Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)

The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...

MAL-2025-39716 Malicious code in xerox-ecosystem-dwm284-project (npm)

The package xerox-ecosystem-dwm284-project was found to contain malicious code...

MAL-2025-10370 Malicious code in @zalastax/nolb-_reaw (npm)

The package @zalastax/nolb-reaw was found to contain malicious code...

MAL-2025-22118 Malicious code in hadianto-nasi20-sukiwir (npm)

The package hadianto-nasi20-sukiwir was found to contain malicious code...

MAL-2025-40323 Malicious code in yard-elephant-emr032-project (npm)

The package yard-elephant-emr032-project was found to contain malicious code...

Malicious code in yinhai-ta3 (npm)

--- -= Per source details. Do not edit below this line.=-...