MAL-2025-128549 Malicious code in managing_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0896f58f006be1f04d41595657fd0f99bd3f4942d924d085d3ad5c8ab370d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129902 Malicious code in rina-liwet39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b5845b0f5892e44ad5b6b8c81e31b55f6dc52448f64151388857b04fe7b3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129848 Malicious code in rifqi-moci84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c15a93aa0702a8a1fa555932bb4b9b6a7bef0115ff4bf0e75074751f9df466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128494 Malicious code in maman-gorengan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68307a69468bc1a8f6b3137e8ce834390518e57112e7d7feabeb34925b65c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129219 Malicious code in oktafian-kue99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec46295b673cd432a9009349ecab86add55e49b0383a01f034422b40edf3ad29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129279 Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127406 Malicious code in independent_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dff0988acdf36a0f941b4816d1e34d635cb6a13b22c5ed54e1f9f71d92b1850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128896 Malicious code in net_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc9d5701866d13a808d6d3dfbcbe8b69f710970c16ffd40427b6260ab505f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126910 Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127317 Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f988924b4463210cacbea9c9127190344a513c5474e9a188354d041e4e9ffb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sate89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b314505c489be8eeac53331b3fc994791c7348ec4a4e1e9e056841b1d29b6280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f2f847bffc9738411d7723dac0135e79230adc42b1546e1c95b28ddb5c7276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in vida-nasi72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26b862fd0ad1290ede518e5ec813b3670c6c6f7bb3b2d8ad58ee91a48aa6830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120961 Malicious code in iwan-tempe40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adeeaaab581732958d7eede24ab1d23d56b5b83760f1294daea9d741032ac3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-semur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de8f3268dc806f3ee4ba6b98e6b80f39e069bf74ee9abf89924fa98b095eedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...