MAL-2025-103787 Malicious code in horizontal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815ca1d7488bfba6ada2055f49af1a0f3d3b47c8e7cdac5e71b0d6a4b2344080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102221 Malicious code in erwin-pisang81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efce1b636bfa437677a468d16bb61f4bff34914f343252436fcdbd64e689808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4496cca838d1a9db6519be8d6d21873b094a28eaa34f0adaf5d390bb333618f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-saguer19-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db0cdea667511fcf1dde719f8a60c2e11937d2a1bc0c1602d7df0362a99fb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35240286d52f99b959cb9a6e416eee2af1fa68a0920224259a2dcd698d48be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12dcea4e0fc23a87098aa480022d0b19e0ba0aea702ac6a77f9201fc7de4fea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guanaco_amethyst-69-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532c8e2f22aa74c70aa48464212355af28c5efdeb00560ffad6a51f81829f45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72338

Malicious code in iwan-nasi7-tititugel npm...

MAL-2025-98405 Malicious code in tiara-empal62-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0739d21a40518c56fc901bece6d1a089744d2e39ea0c9798f2bbdb891640c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pheasant_maroon-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b368c33bdcc0213e4602a97330e64c7ac2560a5592d8c5477cf0d317abd9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-takokak16-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f96d340b682c2d5d58cc71d9b0359cd42afaf28627db065d4277841a6f8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek58-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279d8722699123930e1804ffc6325a17cd5d4ec74462f59924630f61b08156d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kupang92-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f38ee94947dff1ffa25aaf5ba40fd98872ea6054b00ad736c9f2f24129806b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72473

Malicious code in fitri-serabi4-pore npm...

Malicious code in rudi-kepok93-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bcd79d4f909b493acf2f81b6c8a19e22843406abb42d76beca804acb17bf96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97866 Malicious code in hadi-brongkos82-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0d6a2fe8a0ae880668cd87f72986f510724c95387bdabd54d133dce65a2053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336c0b3754fb6bcdaa6979469ae8f01a6f44d998db28d9d1f297b26ed9f4f238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7193ec330ef274a3e8ea028e4a3d62a13927d2ceee9f99289744a4e13a088e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d7d8c847db7444751da2591d1fc6fca9c198ca27b939e525895090de15003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0e412adc58ae45c63e1b1717954e8e2be72ef467032f4e362084e3d5f23f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...