MAL-2025-115122 Malicious code in joni-ronde67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc55083bc5e459540b6955aaa0a30dc8577fe1343cefc5bb35c1722ef41ffd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118058 Malicious code in well_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7489e49d2d822fd5a50638957f3727cd9b548ab454a06ee4c89edf46b7879af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-moci78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123a8ad3c441fa2f81c535eecd8e08132f937acb0ce108228108cc55d157f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-buburayam88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a053063e985e360035d9444d797c06df5c32600c764702243dece150f0115d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d20e21ceabbcd278f90d1ec7cc1b08a3ed058c9fbaf513f6ca719ef717311d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa65578ef630cb234b3e94d045cae16b7bd60b502177da1ec1600141483604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mieayam4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de0b8be5c7c4de1f2d70e542d095c60efed630722e4564be29368f09948ebd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92165

Malicious code in erwin-mangut92-miaww npm...

Malicious code in legislative_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910683a0340eb908dea250411a11182ca7d6fc8c884002202d33f8ec106514f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113538 Malicious code in eka-peyek57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37612bfbd8083d27a532d23d5f6bdc97c0e86cf5f2a86af9c84a41a7c105022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113822 Malicious code in fadhil-oncom7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae21960e298aefd6ffbf75a52102a555781d902246fa66ae6044eeb73d1d28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116792 Malicious code in rifqi-rojak2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5553e774deab000565c71eafe3702dbfebc586994aee160313be6d8c9153e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113116 Malicious code in citra-kacang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0159187c91e19df33d93c774af2c8052e2a3949eb27011a965e2e77dec26d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115612 Malicious code in lutfi-pecel61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaaf92647c1eca356d4764f7d3fcebe90c4344365ba5eebd636631fc11262df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113917 Malicious code in fauzi-dodol2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66ed7f2075bd86d831f725830461b9dd5ad704591e00409a6eee9787626a74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116312 Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117001 Malicious code in secret_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c95a80a231f66c21a44fcfd821de75d30ed7df70dbd4733db88ced3df63036c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117251 Malicious code in supreme_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2daf0adcea88ddc2cd4779fe679f389f57f815b3df57ade77ebd43cab861f996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114874 Malicious code in irma-martabak79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7489391a2ab6cacc25fe06bfabebabb2f826ec99a598028a083c74769c2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...