MAL-2025-65795 Malicious code in uncertain_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53976a9f0e127b5d03aea30fb645baa48303250426e71082e6c0fc9a59af2dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65702 Malicious code in udin-botok71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ac3eb0a0d5edc1455ce9ceb56a8c8e5c86837b301578b721d8e61086a7027a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65465 Malicious code in surya-kembang24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a4f622ccb76bd6b345d7d6802cfe67c8271334d61bf1f158899c25ebaa0da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63096 Malicious code in genuine_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627139fa82d1c7f1ab442017799c71522034c9ae4929354c8be250959fd6d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62499 Malicious code in dewi-rangi87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eb9ae460ed51d460eaf43f5a3f260ea37f3e3be5b180cffef11a39f9f7acf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63387 Malicious code in hendra-sate41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffe9782e1210b70d7524bed1b061e1006dcae4c94f33a80c16364cb93c19fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63699 Malicious code in joko-mie56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb582fd31c396b1ab8bc67cdde073c1764719ca8e23fa85b99c40e1e8b7e1c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49291

Malicious code in strategicflyingfishz3n npm...

MAL-2025-61574 Malicious code in vast_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e058631c68db50668dc5f09a3dfadc7164931b6db5b43f6baf6dc1e87e56ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61017 Malicious code in passing_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd9a5f24ba992f6ee59578d71759d7df3805f4a3fae09aab770df9343403543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60681 Malicious code in initial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940f91dae4901da23794377633f243659eec2a20405ef736fd11bf81a539682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d17890881cc4cb0df26be1170a23ab74e8a0d8ed18a3fe09f1f975a0fa2364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cce027c2ec1d9e6ca6bad2936b7a9810bcd381566859c21f12339762ca5549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60252 Malicious code in defiant_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b7d0e695aedd799836f92c1a9e44f63855a40b19f5b10ee8d2d8b5f88f60bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60824 Malicious code in mass_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f0faf4a52cad77a1f21e752dbf0910fdce0ee1e44c7958d722b7868927293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kemplang98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ba35a6be07151fd83f80357e97f40ab786824614b9176e47855171246c7547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-ragi42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f32684c9fc73d44a33bcb5913ed9a6b6ad7b05fd2d9725292abfa144ceb16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48715

Malicious code in arif-telurtahu39-sukiwir npm...

Malicious code in mechanical_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0692be8fa8c0b68af3f5847a6f12e3dbda80883b82a1d782ae319dfdc1b191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade2b7f8a873c1713b241e39b37f2e5571784ce84df3adedb123f59fad09b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...