Malicious code in environmental_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f145f3b955ee411cd3de937195a1bf08adac91e5d3db58fbf37a4d32974b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90298 Malicious code in rudi-rangginang92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699b4dfba4cdcdee5d8af948d5bd3d9ff34218ed244eb4ff7255e48dc3489e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84216 Malicious code in comparable_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29655e77b9bcc822990abd52667129c282b308d263663208727887122bf5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83042 Malicious code in agus-kue13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ff5e018bbe9d123acbcc0c5ba12c747a8f352e39fc70f84b17f3d20c64f4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83058 Malicious code in agus-mendoan46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6a028c2c70b57e346337171f962bb0866958051c623e458a560c7dab825c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86082 Malicious code in given_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9acd35c0b7a5443b93c8cbb1b7341e519e280e85a310abb04f6452c5710f8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92654 Malicious code in yappy_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72699fc67d7d08e70ce28958e4919218116774b15f36553926c1b4e1911003fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89561 Malicious code in putra-jengkol82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9f48780a4da8438188a8f3d1ffc987a30ac75dc2a26c46bcb2c3b6bb36e4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89864 Malicious code in qori-sambel18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649b93316c7169879266d6248517b9dfa9d1f5e96eac060c1bf8d139589e2661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86299 Malicious code in hanafi-kue38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2c2a9b16f75509710a2e76c29465a3723dcdea38473db73e35cc8c7e6bea11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86491 Malicious code in hot_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6effa946d25149192d1e85a1696c10ae854ca50c506c2805377ccd188452d381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83119 Malicious code in alive_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cab5715a0980bd2f36d17e144c2a8a5c1a4a0d2b3d5bd5c8f349efaa26c001b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85328 Malicious code in fadhil-jamblang63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f719c78236dac3aa21d86cba661eba80a702cb5735034b4fe07adc3c116e7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-bakwan99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004ede2b3cca0634d2c741fd0dc41c390b4f94738705f8286d4c9b9fe92827f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lodeh9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c608f66c8c46855cbdac9ad101c0ddd934729b32ca77347fe37bbab258a2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6ff6e68c12bc643b7173ad31941f2e05dae9a23f10d52b095213ee4fc06936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b5ba877b56043d681cebc1644c2329261cc43c09fc9c9ed58810fac05f2332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan55-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661fc10fa194578c8c50b5abb3496a5468930d44203fbda5ec84668dd5bfc660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65514

Malicious code in vera-tahutek89-riris npm...

Malicious code in informal_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d087cbc2f0a6368e1d354f0f914f79d4977cec5d52a0645d42bd31a8e3dd02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...