MAL-2025-105417 Malicious code in lutfi-mieayam84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34477d6febe9fc4d91f5a7c044ddeaaa4f80b0ad4b52b4a42f4029b9c750d483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539c86cb76423786a328147327eef9a061c5bb91fa9c89b897d99fd3e9e7a4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105218 Malicious code in lisa-jamblang16-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95c9abf2ab2cac4193569f7b3165ead6d9edf9b807010ce88f8d771667cb803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-donat65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af8296af649b35bc6945d82a97bd14a305340444a4487ef4fceb5b794be8db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107482 Malicious code in putri-esdoger57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a0b19224638bc426d7447335a18b916f78bb62f7413943626d0e5ebbf0075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294b2c36aaff7858546ec3306678b8f075944672b53433c2a78e5e9117f83d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106113 Malicious code in nadia-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63eed9c349ce497d28d2b8411c0467b780289b035fdd459623771fea829b0b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98180 Malicious code in nina-rangi27-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52042deb44c0ca4a457b194391b335a5523235f0826865c310f67aac2c94a0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98454 Malicious code in utomo-brengkes40-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c746dc8c36b5bceb123a965fa1edd97bd1c5fcff5c259aa5969996fd9a6dce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72678

Malicious code in bayu-mendoan52-pore npm...

MAL-2025-98234 Malicious code in patria-asinan92-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e36627cafbf403d9ca67bfd6a0e0319f52a4a44a84b3cc7563c354cc1fcebf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98054 Malicious code in lina-kupat23-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522916a5423db48e7be3191bd1d52017ca9cdf1929d63724e8731e40aa4eff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce1e70a7b138da5638d23ec352de750a4e5cf2be3972abbbb7370262c3df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93363 Malicious code in beneficial_baboon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f082d550092008efc56ae8a74a32a05efb1d6df9c0db6636cb4d8c51400a7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94063 Malicious code in distant_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38f702da4e231423fd7c702e561ed6a0fe03aa0943fb06fdcbe75bd58143dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95343 Malicious code in magic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748897cad09803290a01419e806fd9a8c7715734fc55788fe2eef1d97e078743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fa242b0023612cb75feed44de94a8efa4668b6dee0101142ffe0b31312066a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96261 Malicious code in relative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22690eff7520352adce2e8928430e25dbae2e0d7f5035785bddba2f24f728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fef299e101bc43ccd433748812cc55c52ad797d34d88c15308e514309faea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820622021937ac4266087cc410cff9c8140383226cd4353c1a0c579bd893efd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...