MAL-2025-106027 Malicious code in mulyono-sasag95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a759b36ae61aceb4d86843edf03cc2b1e68b41e3fa368cfb7edce13030435bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35240286d52f99b959cb9a6e416eee2af1fa68a0920224259a2dcd698d48be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4496cca838d1a9db6519be8d6d21873b094a28eaa34f0adaf5d390bb333618f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-saguer19-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db0cdea667511fcf1dde719f8a60c2e11937d2a1bc0c1602d7df0362a99fb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12dcea4e0fc23a87098aa480022d0b19e0ba0aea702ac6a77f9201fc7de4fea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72338

Malicious code in iwan-nasi7-tititugel npm...

Malicious code in rudi-kepok93-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bcd79d4f909b493acf2f81b6c8a19e22843406abb42d76beca804acb17bf96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kupang92-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f38ee94947dff1ffa25aaf5ba40fd98872ea6054b00ad736c9f2f24129806b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek58-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279d8722699123930e1804ffc6325a17cd5d4ec74462f59924630f61b08156d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pheasant_maroon-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b368c33bdcc0213e4602a97330e64c7ac2560a5592d8c5477cf0d317abd9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98405 Malicious code in tiara-empal62-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0739d21a40518c56fc901bece6d1a089744d2e39ea0c9798f2bbdb891640c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-takokak16-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f96d340b682c2d5d58cc71d9b0359cd42afaf28627db065d4277841a6f8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guanaco_amethyst-69-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532c8e2f22aa74c70aa48464212355af28c5efdeb00560ffad6a51f81829f45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72473

Malicious code in fitri-serabi4-pore npm...

MAL-2025-97866 Malicious code in hadi-brongkos82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d6a2fe8a0ae880668cd87f72986f510724c95387bdabd54d133dce65a2053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0aed71180569ed4b81abe9bfde3f5b5d07ab876c2325a6fecf1bbabd55d4c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e62e634d802f12d7167c9e7befe4d10140ef56fb96c181b5d39dc0266015a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0e412adc58ae45c63e1b1717954e8e2be72ef467032f4e362084e3d5f23f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d7d8c847db7444751da2591d1fc6fca9c198ca27b939e525895090de15003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94373 Malicious code in expected_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605a6b54a634951f0d1db7afad8c9e176846643ab958aea3e4729a6d876fcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...