MAL-2025-114101 Malicious code in fundamental_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7968719d042c31e964e01eeebe93ebd2d66200b2b05640f875da17c37ebd94c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117167 Malicious code in soft_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcca832ea0e9bbdae1173be5b27d0f61bad5b9a6edda3771f2fae331889879b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-telur92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577361a89c5bba87c9890f59444d481d6ee2acbc23d948f596d6684768f716ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b931745bd1101038eb923b6443b6ef170556ab037c1131b3d5d5a47333f4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115946 Malicious code in nana-kupang69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff6ed812d2f270d3a14e0978404196d8fb613c47d90f7ed1302e05f8141445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117822 Malicious code in veyone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead5ee4733551b2f288777b28e76d15e6ab0a689c4b8f9a06c6031b158be317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118267 Malicious code in yanti-pecel23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0744911ee910932d5af493133f7e62699c39324c4cc54797f36e8943d35c482b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117059 Malicious code in sinta-gorengan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab40fd644d4e687545a0b8af39488fc506616d0a32b26d54de51d77de29f865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114038 Malicious code in fitri-serimuka77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d690d2e62fc60e14f39e33d9d17361e61c38ee01fe400489645179d249a90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-ketan21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1661b2886795bbe717ddc8db7748c0d4623c5b438238db424a5373d98f83cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115227 Malicious code in kresna-takokak97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4908c3fa07160aecf7e241fe7d360735ed82b162b6996b8ee30cbb0c97e2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mendut76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c36426ddbd7bd9fd4fd63f19d5f0a76341bd88c09a3c02b83edd50bd4ddf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6522da26a3d1d13a7cc4f303aded8cbaf42bbcd9ed3fd629fa80a13a94ff88a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cb1e5cb52b3563ab0ed1af3c6139d2739489c1276e9a0e47a3b7ee6819b313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-lapis50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac7bd696874ffa91f7ff6e33a4c87abfc7c193433b9ce803638bb064d92542e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115293 Malicious code in kurniawan-gado-gado19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2ec26b1f8c3ca7ae29cab6437847b76e5ce596caa0cd3bbd9168bccd613e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74767

Malicious code in darkchickadeechocolate-80 npm...

MAL-2025-111638 Malicious code in acceptable_salmon_moccasin-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6938617ba1a5977563b98a08fa6d4416c07975ea275c849b2c2b5bb756244d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112329 Malicious code in sole_guppy_scarlet-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b6340f7135d49cbf460593d0554cf180e3f260e284b3172a0c37b927045aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111713 Malicious code in characteristic_camel_ivory-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632673d5dfc7fad20135b9f02a6953d738e96c2bd7255d41efca1ae6e259e13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...