MAL-2025-110868 Malicious code in wibowo-mendut32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b33f45dae4376a229d328943f61f362d4d759de0d96c29e8b8b6b084d3d030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105218 Malicious code in lisa-jamblang16-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95c9abf2ab2cac4193569f7b3165ead6d9edf9b807010ce88f8d771667cb803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-klipo8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2ecff947a6050e5ae3b5511a753f6e62577708b5feec07b60bab61378d18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72678

Malicious code in bayu-mendoan52-pore npm...

MAL-2025-98180 Malicious code in nina-rangi27-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52042deb44c0ca4a457b194391b335a5523235f0826865c310f67aac2c94a0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98054 Malicious code in lina-kupat23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522916a5423db48e7be3191bd1d52017ca9cdf1929d63724e8731e40aa4eff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98234 Malicious code in patria-asinan92-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e36627cafbf403d9ca67bfd6a0e0319f52a4a44a84b3cc7563c354cc1fcebf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98454 Malicious code in utomo-brengkes40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c746dc8c36b5bceb123a965fa1edd97bd1c5fcff5c259aa5969996fd9a6dce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce1e70a7b138da5638d23ec352de750a4e5cf2be3972abbbb7370262c3df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94650 Malicious code in gastric_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df89bc4bf65a3dcec57828d22fecd220a9b1de5536d8321fe78a87eb1b3e1579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96261 Malicious code in relative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22690eff7520352adce2e8928430e25dbae2e0d7f5035785bddba2f24f728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0884484116c416136e8c66f8b962f594ed8efee8f52fafccf552f13dd4b808fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fa242b0023612cb75feed44de94a8efa4668b6dee0101142ffe0b31312066a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820622021937ac4266087cc410cff9c8140383226cd4353c1a0c579bd893efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fef299e101bc43ccd433748812cc55c52ad797d34d88c15308e514309faea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93363 Malicious code in beneficial_baboon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f082d550092008efc56ae8a74a32a05efb1d6df9c0db6636cb4d8c51400a7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95343 Malicious code in magic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748897cad09803290a01419e806fd9a8c7715734fc55788fe2eef1d97e078743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94063 Malicious code in distant_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38f702da4e231423fd7c702e561ed6a0fe03aa0943fb06fdcbe75bd58143dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96797 Malicious code in strange_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da846ffc45861e77e860d9d277035dc687e6200fefa692aa1d1ecdd2067b66a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93516 Malicious code in charming_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9f97f6b2520b2aadffa83f6c40c6dd255692bee4f98e0d66194352f330a16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...