Malicious code in joko-brengkes56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd905b89f2ef7c5deaa823514df19fb719413813ac93fd13ffe8207f8b78a51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135193 Malicious code in lina-rangginang65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4178533a515c5400089f3027ac4c93f55b610e4808f92eaf3f201fbec7e9ffe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135071 Malicious code in laila-ikan22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbdf91587a403ec961dca0cae86d742a9dcd9d1dc7065d28aa9e4608c466db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-sasag52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3f71ea7713d8bdce8f2dac06e0ffd11937c0167e0dfba97e61715a4b00c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-rujaksoto9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ca93594a034767b07bd6fa04a530e303a2d230c7a28a873e24f4b4fff296e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135485 Malicious code in marginal_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bfb0bc8031670fb89cd718199149355b12aed6674c530473a1143d30a0850a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135549 Malicious code in maya-tongseng29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fb7f5fcc1c7afe992e72fd810a803c45e46ee9e0801df0adf5a86f08009897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134355 Malicious code in innocent_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed1c9b60596f2209cf583b71bef950b99c1a2b6ea8e19cdfc0e144a8d47ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138084 Malicious code in wise_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723e1e8b82821835ea36194fd25997c150a28f332eedc0d0c4cae299ab177684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134521 Malicious code in jaja-brengkes84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41d98739ee674efa053d35a2dc9e73e930a5c13b25bfcf75d1637712cf4c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132384 Malicious code in candra-ragi77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6c9ef6d186d37804414d9ecbcd69ab44a0aecbd6605ac920ae5c6f89a099e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b30d3a24f6e52c140289f203e5470b6145c83e295a66fccac95d2e98511c68d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eed336917d42dd9558a3da3f49396d7a67aa4c2a1cd9fa4348e6ab808cfc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101645

Malicious code in agus-kentang9-riris npm...

Malicious code in vina-keraktelor20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026caa0cd3500e35ebae8cd40845f62ab39bea9a3a4546ef526e716ee7ef381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rangi73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb59a358f6161506dfb0915deb4fdbc0befd1b07807d7b2de65a6e1fbbfa90f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tiwul85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04016d49c3316567799c48b9bffbaca72d455f457e522260074dae9dec34e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loose_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03971c914b9c10fc568d9d0164eca390e5e53b8908ee4194df7e637197d01a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127229 Malicious code in holy_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a67a6f26c68f0347e1732b38893c2474c68da5c770f0213364a4450218d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29c4bb131cdff5e6bef837002a35c4da51994352b59663cfec6798321c1482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...