MAL-2025-61496 Malicious code in tragic_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952a5851f8b92fa0da587c5ba788dd8882ed60212df9460fcfcb37db7a6e4655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60619 Malicious code in honest_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cfb0098481267eabcf1ccde1ce2fa99f692527168fdca96cae16adb716e681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60605 Malicious code in hissing_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b50bf24bbbd61a20f17ac40b7103b4efcc5a277a0b12668d4aff0201c09154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60250 Malicious code in defensive_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d668453e82a9790e1e084bcc3b601f98227d73d4142bcce2435a5d42d19f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61602 Malicious code in vocal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fe542b13642c9d0b5abc4f9c540419ce00fd51d41c200cbe6d761a69c74cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61367 Malicious code in stingy_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305409bdd40d050510cd909d5e999d0e71391fa950c4049a65b3a73562df79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47528

Malicious code in giganticlizardz3n npm...

Malicious code in erwin-lumpur86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cbeb80963131d6b604643cf03df55d8c0f4f44c9b2c0bf593d0f8d68786f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shocked_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b612e4113a386d8209e0425b34caa141715cfd6d2850a15dfcde99d599d119c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f968d0304b31e97afec68eae48b247db14f7506a46e9803dcc490287b28530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c237d3652f56ac5c81ebc5f198861f8b87b806269ed499be4450eb78f318792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-bakso97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4031abfe49eaa09e5526f8c3ed1b228f6875be9436e841c0f00a8ba31067a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-dodol64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22b1a853e9dc7d061c4706b0f2c53d0f1847e6c1661a1ecae505b359c33c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rawon20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04088b74bbcc71409ad813c80cd3b77287679dee91f1abbcfd85b16f714538f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mieayam36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3345132d95fb02ecd32a065123fac677647d0ee439d2a5dc334a538b7a667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bf61e74baa5fe87782b4818e39fae9891b8032a14be1e1f0ae5f106725ec8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98cc36e75786925da20cb34575ad610d9d27605061e2debe34e4f64098cc3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4c14999235125106aeb2f605707867b9e718f306fc08706133139cef05fcdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-tiwul21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29896db61f3ef00e81a7e7121fe4aefdc781b299990b3f06a6e76c91c08ddc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kembang14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d724f9d69239a3aa3bedb106763bcad83e37870c601146d0aa5db802200da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...