Malicious code in dotenv-safe-public-puppeteer-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7456e281adc481a1ca201e721d3fe84c7346df5388c89034a25d87af3201aa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123023

Malicious code in quantum-configstore-mensa-spica npm...

EUVD-2025-120561

Malicious code in webdriverio-eslint-cygnus-elara npm...

MAL-2025-145865 Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa5e7c9dc3d753d65b3a92dae95e45ef42619f35d4b3c87f3f5db8bc96069e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130387 Malicious code in surrounding_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6758bbbf9d385abe24c60cf52b2f7b4c88a63bef7beb0002ede2caf9809b7290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kacang27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fc20d288fc1d51e140d6803260d42f8961d5241a6f923994096346bebdad38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115735 Malicious code in maman-tahu100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcf7b4f35a9b1e05e736b808715d7236ac7de2a3164d3d54e2d390a262fc19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117485 Malicious code in tomi-lapis86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e0cb6e35edab02e067036127259be578fccf3a99583262061db784f090441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101098 Malicious code in crowded_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85475299b83ac51a002ab9fe5e84ec8c0c6d90dd4fccdc75fdc048ec53bc4e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104378 Malicious code in involved_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c858d7000c7b2812ced0023541fcdc6f0683b475314bb59e8c90848e985808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81281

Malicious code in massivespoonbill0xrequest npm...

EUVD-2025-68791

Malicious code in nurul-rujaksoto78-ruro npm...

EUVD-2025-69310

Malicious code in lina-miemee90-ruro npm...

Malicious code in ogi-telurtahu72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b55a07b2b4d981c861da37c521f45ca19b4946587a780f3fdef1c7608ae9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d04326daa58f9120251ea5f45fa6545b6795c73f1bd961c9841cb1e8001935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-telur55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8130304aa5f4a4400344336cf3160e8bc960bb08572f72f34d534f2fd49913f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mieaceh71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ae1794fdb01916945d06ea6d27f35345171a05a7b664cf6fba78faf046e90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66663 Malicious code in administrative-yellow-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c50eb7c74565e810bc59ebe5c0552e6b6d465c32fa164ae08356f6945c6b53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...