MAL-2025-105104 Malicious code in lexical_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c376cb70e23d581bd2f8682fd3cb4524114655189942ef62733231cb8adc9c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110327 Malicious code in valuable_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd003d39321571edeed7dfc20847cbe4d80d8b2ecf112908c984bc1385b07fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100569 Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100961 Malicious code in convenient_moose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea37dfb939182eabb06c2314f6cc0cc6c9c02c213f2854442ce8b36fa6c9b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105663 Malicious code in mathews-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258ef103377d4db35ae6774748a5c8c1bfacc53017150a47da9d44c12646b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101193 Malicious code in damaged_dragon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539c86cb76423786a328147327eef9a061c5bb91fa9c89b897d99fd3e9e7a4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab13fe563cebf7b10f4547618bbd1875616d53b3b2d028ac007b5970de9223f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106113 Malicious code in nadia-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63eed9c349ce497d28d2b8411c0467b780289b035fdd459623771fea829b0b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294b2c36aaff7858546ec3306678b8f075944672b53433c2a78e5e9117f83d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105211 Malicious code in lisa-empal62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ad185444430627c022ffeea214ba9d5ff3dca9267bf69a693a5ffde3849214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111432 Malicious code in zain-oncom95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2a7634b56e0e6d91739ecce5b73ee43bb7028a8db25ae980b1ca7b5451df2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-donat65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af8296af649b35bc6945d82a97bd14a305340444a4487ef4fceb5b794be8db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8eb5a9ab499f74a0f9a22a975deca87b520afe303c238a2b0a293ddffd8b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105417 Malicious code in lutfi-mieayam84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34477d6febe9fc4d91f5a7c044ddeaaa4f80b0ad4b52b4a42f4029b9c750d483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107482 Malicious code in putri-esdoger57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a0b19224638bc426d7447335a18b916f78bb62f7413943626d0e5ebbf0075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-klipo8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2ecff947a6050e5ae3b5511a753f6e62577708b5feec07b60bab61378d18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83852

Malicious code in umi-lumpur28-ruro npm...

MAL-2025-110868 Malicious code in wibowo-mendut32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b33f45dae4376a229d328943f61f362d4d759de0d96c29e8b8b6b084d3d030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...