MAL-2025-107482 Malicious code in putri-esdoger57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a0b19224638bc426d7447335a18b916f78bb62f7413943626d0e5ebbf0075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105211 Malicious code in lisa-empal62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ad185444430627c022ffeea214ba9d5ff3dca9267bf69a693a5ffde3849214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104206 Malicious code in injured_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170bd723ab9d6bb52c5aff556224195c272ca9511693ad4b3a35b400b6c7b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105417 Malicious code in lutfi-mieayam84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34477d6febe9fc4d91f5a7c044ddeaaa4f80b0ad4b52b4a42f4029b9c750d483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106113 Malicious code in nadia-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63eed9c349ce497d28d2b8411c0467b780289b035fdd459623771fea829b0b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99151 Malicious code in ade-martabak18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1371a5fcdbf1b2088a0d8a9b8352359ba8187f2f91f211b8b67db7ef4c23cd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111432 Malicious code in zain-oncom95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2a7634b56e0e6d91739ecce5b73ee43bb7028a8db25ae980b1ca7b5451df2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83852

Malicious code in umi-lumpur28-ruro npm...

MAL-2025-98180 Malicious code in nina-rangi27-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52042deb44c0ca4a457b194391b335a5523235f0826865c310f67aac2c94a0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72678

Malicious code in bayu-mendoan52-pore npm...

MAL-2025-98454 Malicious code in utomo-brengkes40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c746dc8c36b5bceb123a965fa1edd97bd1c5fcff5c259aa5969996fd9a6dce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98054 Malicious code in lina-kupat23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522916a5423db48e7be3191bd1d52017ca9cdf1929d63724e8731e40aa4eff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98234 Malicious code in patria-asinan92-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e36627cafbf403d9ca67bfd6a0e0319f52a4a44a84b3cc7563c354cc1fcebf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95343 Malicious code in magic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748897cad09803290a01419e806fd9a8c7715734fc55788fe2eef1d97e078743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93363 Malicious code in beneficial_baboon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f082d550092008efc56ae8a74a32a05efb1d6df9c0db6636cb4d8c51400a7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820622021937ac4266087cc410cff9c8140383226cd4353c1a0c579bd893efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce1e70a7b138da5638d23ec352de750a4e5cf2be3972abbbb7370262c3df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0884484116c416136e8c66f8b962f594ed8efee8f52fafccf552f13dd4b808fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fef299e101bc43ccd433748812cc55c52ad797d34d88c15308e514309faea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fa242b0023612cb75feed44de94a8efa4668b6dee0101142ffe0b31312066a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...