MAL-2025-116365 Malicious code in patria-mendoan58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24eb9014e107aa2e6002615fb35646c1de283e25c527a2f6181c9d4856844bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112633 Malicious code in alive_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c761f3a5ef27fd0f97feea3b881cbeead0ae89857f61cdb42a9d43e620cd38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_thrush-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95a25651ac4b632c63e2daa34fd8cbe332adc5bd887c9fbf640a30f1e6e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fe74b66fcde0aea5d96e81ed3757d11a4ed81045b48b503daaa3b131124e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103629 Malicious code in heavy_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0dbe85c01db4fddecfc3f63b96e127fd70abe4f6951f47ee4c68d0796e0c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103016 Malicious code in galih-brengkes70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c68fda19c060035694496141500c5f6d35b5aa90573a364fb15618335375d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429ccf25afb2ce0cbbbbadefb0c2bae8af28a5af121f3b9714d64b66b4539de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65421

Malicious code in adjacentwarblerz3n npm...

Malicious code in riana-miemee87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494f985030649d9c0988d349ff5bc13ce664dd67e83d258d6532dfa08c083f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89342 Malicious code in overall_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83940d192f41bf0b5edefe6edbae74c8a3d20f955cc86221543069337c556b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tapai50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc719e9d6554325ddf7dfe14b1fb60cc8f5e69be91b54a2a2b221a0d793188de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90799 Malicious code in super_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1535a47504390190dbd7ded71bd11fb92675f03a8a6b534f1467cf38314342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92878 Malicious code in zaki-lapis60-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4c9947ae3520f04d04f4270bd4d2c9630dca55310161ae486b39a76423226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79264 Malicious code in joko-sambalado4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d04bcedb9e12ebd38d53368e12daae9b97424123ae799823fd8e63e3d24a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82547 Malicious code in yanti-nasi84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064b47657242c7a94b1e0eebc8553d476139b45c6c7119b2a203f51eded60e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cb460041dd6e492df0169b55dc03a4b475a5b3b2fb4f983b65d87373a5b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70685 Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rendang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a59240b5f5e65d26922b1c9f23cec7d211bd68715ff551dbc4b9ac95b196d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63372 Malicious code in hendra-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6f8c4626760fa5e053c14bee95e9b76b95a2c1cfbf9bd01c2d2837d52f3b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3dcc01cde718d0697ab8c9fd3567098f999f89500c2c95a473cf067c4f6c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...