MAL-2025-94920 Malicious code in ill_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e5d3b51ecd814b35cbebb676208cd90d6b031a6ccb5f324267321fe8ae3c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96859 Malicious code in sudden_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c7119207225c9c6c6b76a4c979faa28e7bf0ab02acaa4356a36144b3a80da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93868 Malicious code in cruel_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb5569fc380a79fa841dbf068ef6fcb102fcb2d9c298772fd35123e0930e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8049e1cc3d667e610b4fbd2e400239ea8bc0075a24f99f95798405a9c238de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-peyek68-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444db34977c4f4432fb64f2eb63effd2d836976d0aec36a7286659df93de845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klanting72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6e87fc20b626a9b7e208258b2f266e4b186b444844673e21737ff5e1e872f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65514

Malicious code in vera-tahutek89-riris npm...

Malicious code in clean_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255cfcb5c7b304a375c36715a9a509b3ebd3bc8ab9f5b88242a6466c09535b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lupis59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718d0c1b59f5ba1a418edf812e1f31e8d514b16191918cdb8ad514eae617cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-enting63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447c0e80c62425333d0b982b544cc2bc9afc58a5e00c6db37bb064bd59068ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfa11c2b04c468ee0889927b1466af7e9f7de567b7bc29237d9a9144e7e3aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rangi28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50dccca73955adcf7ad385b2f0efbe41cf2d9ddf6f2b4c134c960d8a03ed918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-martabak14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72466831166a82d5417b58d0e2914d3552d21bd477830561e161a80199f5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67869

Malicious code in patria-getuk67-miaww npm...

Malicious code in bella-oncom84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792cfcfe87179d7188d4ae9ea0bcef25207624c3a02e063b0428061fdaa029ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b5ba877b56043d681cebc1644c2329261cc43c09fc9c9ed58810fac05f2332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-sambel41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3decb948f474fd172f6277afcbd9f6e7b9afaa367a80f437fdadc6d6e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89864 Malicious code in qori-sambel18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649b93316c7169879266d6248517b9dfa9d1f5e96eac060c1bf8d139589e2661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88623 Malicious code in nadia-ongol-ongol10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc46beffba9ca68c39ba83081938cd242beef7f3a59dc2200144806049d07825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86816 Malicious code in irma-rangi29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670959244fb3ba6adae5bc37f7514fc3e325fe70382f1d0ee1094bb8a7bf4289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...