MAL-2025-96604 Malicious code in skilled_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcd69bfabc55f3a4909b81ce1e9d1f885de0ffe2ca3de7daf511369ce081e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94289 Malicious code in essential_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1f47e5dc913a7573a4d41d701670a773094b8682a6bcde9f62b5c03608f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95888 Malicious code in philosophical_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cad888e7281f536b6781d5882af5e0930d2e2206e0fc69e4da6db7046c3772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94047 Malicious code in disabled_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d7d33b8251ac4484b0cf6bfdcdc8ca58e6a35561875aa7df71b5438f38300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0ce8596e7e9365ee583fa118c89e729d521c2167548931a92411a469cffcb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03469b05c389dce78bb38270df2d9e75de11f55b1228ade3636afc1f07100ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-sambel41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3decb948f474fd172f6277afcbd9f6e7b9afaa367a80f437fdadc6d6e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85209

Malicious code in kiki-wajit16-miaww npm...

Malicious code in lutfi-enting63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447c0e80c62425333d0b982b544cc2bc9afc58a5e00c6db37bb064bd59068ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67869

Malicious code in patria-getuk67-miaww npm...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lupis59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718d0c1b59f5ba1a418edf812e1f31e8d514b16191918cdb8ad514eae617cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-pisang73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00a74aef0d7b209160602e56e3dccf6eabf0103b1955bb2536f42144abae2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-ruwet9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7306eb777c2ca523ec047085d66675766b942e968415a8d42e60df9423bd4b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e33bd9a194814083e307ea5efb48c4ae85db0af1b2d87fd279b3bbd29f0cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-gembus2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a33112f40932c20b8728f4c2cde8a479d183a058c9d9649ea9a7de88f9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfa11c2b04c468ee0889927b1466af7e9f7de567b7bc29237d9a9144e7e3aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31460fe03259c7001a94b09f3edbbc8f87bac8fbf24f09da672eb7012242ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-keraktelor87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668679f8c0d163e3958f250f1616c3c2a7a83092a7709e5eef36f4c9ce45b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...