MAL-2025-90545 Malicious code in sinta-mangut33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6560682e15356364b00e42b26eaccecf32af1c8b14c4f6a69476cb92bf387d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84530 Malicious code in dewi-oblok79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfea454d50170c957c5eadf78827f054802d91cbc3a214fe7c1ac2d01eec095a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84054 Malicious code in cindy-semur56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fd14dff3f828c5bc355a8a15393284b7a4cfa8498d77bbe6dabbe11cdbc7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84809 Malicious code in dry_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16002ddee5f54d0f54abd60c89b2081d85607fb8adb5175fe139af01f4ed5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90005 Malicious code in riana-menjes24-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664aeb4150bb5242c0c4d4e7edd440390feaeaa9f31ff62acfdec0a4fc4d8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92551 Malicious code in yanti-miemee73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6417f3e86da7b8083ef7355223c108647ac308de0d90265a7e54ca2e68dd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84898 Malicious code in eka-oncom23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d0e92cda36e11b0b3813944f585efea1bf1a2e4d5acf728db583a150b4d610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83315 Malicious code in arif-ronde19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582dee8e8f36446e5f0f8777ab3cd421a87db609322664d63b578e16eba5f17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gulai46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431e96642ea6acd19c98adac331324a8f5f5bd0e3c468170c4774c924593aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3569e7c846055a450fb4fc9e53f5a77d52e9dc76be3eff4ea7ed6506c74f8076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-naget48-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a1713d6d4aeebe53681d96a5e713c3f7a4965f01a1679182b7fe40321d64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-taiwan5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c8fbf0ced2c07d69135e0a137f883db3ea47d0e470908fbaf22ecff146a6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66323

Malicious code in tania-ketan11-miaww npm...

Malicious code in dono-klanting90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f9845c507deeff48f77f07826f5fd89fdc0c31e06cc9a4a5ea4304fbbea8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-donat9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cdc947243594eed868b8d3f848b4cd5ba911b63739769663ef5e2eb0e76553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tumis99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e0abceb59260fd0a58e06d793b99bccfd88b1d98116d99db70c3fadf2fda55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gudeg86-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1247ce087e6902c56f32b931413293d74763527f66cad2c295c9bcb1d4afe02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasipecel62-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd338a66ba3a64b1795f6057fc7f0f3f4f8720cbeaf62c3ef7a988b57c22d25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rendang84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e91998f6086c37ea076d681174dd12c344fe55d370e1c10e5dc373254f87f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1046c4772b56be81f8a8a9184e7c486dde1482dedebe5b384ba247a9767f94ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...