MAL-2025-94920 Malicious code in ill_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e5d3b51ecd814b35cbebb676208cd90d6b031a6ccb5f324267321fe8ae3c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93868 Malicious code in cruel_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb5569fc380a79fa841dbf068ef6fcb102fcb2d9c298772fd35123e0930e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94959 Malicious code in impressive_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693d64f76b88be67a2fb8e39e4e48cd6ce95dfd798c83b621f4b9be8d3c42232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-peyek68-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444db34977c4f4432fb64f2eb63effd2d836976d0aec36a7286659df93de845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klanting72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6e87fc20b626a9b7e208258b2f266e4b186b444844673e21737ff5e1e872f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65514

Malicious code in vera-tahutek89-riris npm...

Malicious code in clean_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255cfcb5c7b304a375c36715a9a509b3ebd3bc8ab9f5b88242a6466c09535b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lupis59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718d0c1b59f5ba1a418edf812e1f31e8d514b16191918cdb8ad514eae617cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-enting63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447c0e80c62425333d0b982b544cc2bc9afc58a5e00c6db37bb064bd59068ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfa11c2b04c468ee0889927b1466af7e9f7de567b7bc29237d9a9144e7e3aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rangi28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50dccca73955adcf7ad385b2f0efbe41cf2d9ddf6f2b4c134c960d8a03ed918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-martabak14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72466831166a82d5417b58d0e2914d3552d21bd477830561e161a80199f5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67869

Malicious code in patria-getuk67-miaww npm...

Malicious code in bella-oncom84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792cfcfe87179d7188d4ae9ea0bcef25207624c3a02e063b0428061fdaa029ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b5ba877b56043d681cebc1644c2329261cc43c09fc9c9ed58810fac05f2332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-sambel41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3decb948f474fd172f6277afcbd9f6e7b9afaa367a80f437fdadc6d6e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83824 Malicious code in candra-mendut57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311bc7e9373a0da4de048a3c08395012508ed2b6594fdb10a98a42d1813efc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87549 Malicious code in kurnia-tapai40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd787ef4deed8d20d2bd73222934fe3830437d09fa1459056125b59b4af9be74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85842 Malicious code in gilang-keripik85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f37e17c34687a7d7b2dbb0241ac7dd48b9fcffb452fef7e97a0e118c185df19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89595 Malicious code in putra-rangi99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a9f78683854ec75749d8f12404999acce047f40544198dc3a100f577fb1a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...