MAL-2025-118292 Malicious code in yanti-toge21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3613ede13ce499187b0dcd2b5c5a0240d999e5c97bebf72cefb9faf0bb2df013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116373 Malicious code in patria-nasiuduk86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1531dfd87ae205f936f80f9ccf5e6c8cdd377a634066608861a0e476b6084f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115122 Malicious code in joni-ronde67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc55083bc5e459540b6955aaa0a30dc8577fe1343cefc5bb35c1722ef41ffd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113917 Malicious code in fauzi-dodol2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66ed7f2075bd86d831f725830461b9dd5ad704591e00409a6eee9787626a74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118278 Malicious code in yanti-sambel86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd7250170c57344a53382df0bfe72dca597c6c6d30ea85fa05694a6847e052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f2e8fe8811faaf09754ea3df9d64db92a5f802bfbd7a9be87763b0479dd09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lupis97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d24a318d6777aab6920f7249d9588ebf4a78b80131b31eb8ac120e55e05327b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getuk36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3b51444b958719835d640b59161f8a22811fca741be31273a3721a7b497c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-oncom44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f02bfa5974e102442d28222a707e8a46f31690f6148b0eb9e27bb818dc541c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kue44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f854fcfa7033270e8fa10ecf97bb3abb985f69193322c64d7d803d99cdf7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-botok24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038c3fa576b9baf6da68339a85cf7eaa7b7b76a4b1491e8babfda7dbf6a381f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d20e21ceabbcd278f90d1ec7cc1b08a3ed058c9fbaf513f6ca719ef717311d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-rendang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42e9cc1e49ca4a8abea710255d52f9b2cf5756436a2a0cddf06852bd1e2a9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b07641448ffbdec201330d94853a253e5888f0fbf8883fdb77fa6ec76260aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81019e9318c382cd501d02591c906e2612b06b0027e936eaeaf357a49fe0483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116312 Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92165

Malicious code in erwin-mangut92-miaww npm...

Malicious code in vina-tiwul37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb2d6b14b5eb8a920c14863587ea4934279c706ae0121145629bf58d2084311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jus99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73a245031f8967049bb4e11827437c060392b2a60c4f8b286c7e0e347de8443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...