MAL-2025-110739 Malicious code in wawan-kripik22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e234fbb05c536d304dc739d31934154faaf700c7b4d4fe05ec3af89f7f4e86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111179 Malicious code in yanti-kue12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7833d88963cbf60a6c8b1f44fa3735cc06bdfbe96890c4a9173218177c635109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110673 Malicious code in wati-buburayam16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b2c32c46823f9a1212b7a11213d0bfd94334dd1cbf4e32a69f57279d1b40d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110743 Malicious code in wawan-lapis55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cb5152e81943e92ad08350cead03500f314db3f679019a2c6c625a82a49d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103214 Malicious code in gita-mangut74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fc17c1b915eae45605472db4567fe7f80876a7ac220cd74d72b62040bea02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103597 Malicious code in happy_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b5486fd611a39ba039b88d90c18c19bf9952bc44b6839ed167404887f8b1f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103441 Malicious code in hadi-getas8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e4b0949c836dc8caa56750642baaeb26e9d82b3cf56c1c4a51d20f8e1a9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103151 Malicious code in gilang-papeda20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7776ed71a8ff4e90fe603210dbd7df285482bbcfa1754c9ba9c848e49135d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102925 Malicious code in fresh_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6dfd7a0e721dba0b4778e856a2a8ea442197478a012cd9bec802c57f505074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106529 Malicious code in ocha-naget86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb155eb14dbbaa7b840acaac9e8226615a13655cb0cd74db4ae418e3c4aa27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107451 Malicious code in putra-kolak23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb6938c380d24f4042efe967f6f34c503d7e9d4ff42c2e67d174388ee928f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106010 Malicious code in mulyono-kembang4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8961795bd02eed56ac3dab4b5064730b9b9951db8eab4c10022bc8bfa624d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105238 Malicious code in lisa-pisang95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710a3c24f49ae49b187a810d692f539f858b1b708aacf117e95338012aa3b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98733 Malicious code in gay_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecb5f5aeb686f8e680ae385709dc8333f7b050260adff6696bde531d81b1dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98802 Malicious code in mammoth_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14910efa78f4f94de86f767f4e028f3ba45705e67a23057a99e65419ded56067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c2f65d56f07f254009ad2fb5272701852ead58862f9500f55845ac079085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98671 Malicious code in defeated_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f460d781d2b88b4f1bf127bf2e5ef5900f18e5ef001936c7b9f34ed60e53e732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72669

Malicious code in bella-lutis91-pore npm...

Malicious code in gopher_aqua-28-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf3e9e6dadd89d36dea5979d7299e41ec28fec82339093ae2828c288b6ac1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gorengan63-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a997ccac2bbbfd5f6206483cdfd1b64e7cc491d02d25ba1e5900883adf050bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...