MAL-2025-122060 Malicious code in naval_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea587595b8065a17b88b3f1828253853b2f10677bb87eeccce04db22966fc39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122775 Malicious code in qori-mieayam23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b281ad9c3a082502ac889e023e1975eab65fbf689bf0915262ae0b076c34753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106343

Malicious code in bottomminkz3n npm...

MAL-2025-120476 Malicious code in hadianto-mieayam45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4860b07224b64cb55597e388a686437a07a45f5edfe661fee9bc040c208af501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121454 Malicious code in limited_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f1471c02b948f73faddafd152102a3a709544c55107e2b9e5ea2d3eb00160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jus99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73a245031f8967049bb4e11827437c060392b2a60c4f8b286c7e0e347de8443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ikan80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562e81b0f633f92e0e84a1ae250250e145bba1f48d2550435d9a12ce66b9e1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lapis42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff37120cc053b89bad351fc3dd67ebc3d078f3489bdf69e50bd34d4f9a67e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81019e9318c382cd501d02591c906e2612b06b0027e936eaeaf357a49fe0483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-empal38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65bdbd48f70657da44dd466efd2448508166c31fea5e992bc9b3977d3d8a3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kembang20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb8fcdb5e60a5c0233e8ff4f67974992daa98023c3d8d25163b6d7cbd26ba6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getuk36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3b51444b958719835d640b59161f8a22811fca741be31273a3721a7b497c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sambel23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57643f521364299e3cbad3d2e8382b50f08d54300e2d935b868b250f43dfa3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-rujak65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e217f258f20bdbfe86d7e57b5fc0b24a5e63f4dfe072d1d809eab873971e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kembang95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8901e8baf92d7ab46738e3529b10b3c308e7d2b027598bf5d40dc2994162a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lepet22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dad346025ae7f9cfd34e2acb19d3c846a885a175b396972d48a7a4a48515a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-dradag46-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f6f6643adf36fdfc1b6be51363afb85ed7a44aa85bec5a97912b8828689917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe538ccc32e33679dc598b4854f6fced59f032a430779331a06af9bd651b0e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd1d6679419f1518e3186bed9842dbebbec750320f2419c5cc8326ff5413074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118292 Malicious code in yanti-toge21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3613ede13ce499187b0dcd2b5c5a0240d999e5c97bebf72cefb9faf0bb2df013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...