MAL-2025-115293 Malicious code in kurniawan-gado-gado19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2ec26b1f8c3ca7ae29cab6437847b76e5ce596caa0cd3bbd9168bccd613e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117822 Malicious code in veyone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead5ee4733551b2f288777b28e76d15e6ab0a689c4b8f9a06c6031b158be317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-rangi92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d57cc25b6383004134e1a9cbac9837c70b576ce4723c899b64dc5e7d2aab26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mendut76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c36426ddbd7bd9fd4fd63f19d5f0a76341bd88c09a3c02b83edd50bd4ddf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778d2aa1e1870ca23dfa57dd04af69dacc2ff31251cfd6dfa8002a11408317c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-lapis50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac7bd696874ffa91f7ff6e33a4c87abfc7c193433b9ce803638bb064d92542e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b931745bd1101038eb923b6443b6ef170556ab037c1131b3d5d5a47333f4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-serabi43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9511833ff12c49b76fbad5a194814a6e054541f59a3a6512f223dc7d8bed0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117653 Malicious code in umi-saguer27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff52126b9cb2b63b1ad2f0c4c3f73a481b6fc893f51748973decf7fdb9bb5823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117167 Malicious code in soft_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcca832ea0e9bbdae1173be5b27d0f61bad5b9a6edda3771f2fae331889879b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117059 Malicious code in sinta-gorengan18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab40fd644d4e687545a0b8af39488fc506616d0a32b26d54de51d77de29f865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112401 Malicious code in top_gibbon_yellow-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301a47060fde5a72c39104ca3a725639e40e87b8613fde2d5efe8eba129d9e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111713 Malicious code in characteristic_camel_ivory-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632673d5dfc7fad20135b9f02a6953d738e96c2bd7255d41efca1ae6e259e13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111664 Malicious code in anxious_wolf_tomato-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4fc431a1cfcf796f399b911b31c8bef8e152b2e9cbe4f0f0110087603c2a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111946 Malicious code in glamorous_egret_rose-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ea354f306ea027187ee35ce2e3fb39bfdf3a14dd47cb685c6c49d00a695e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111711 Malicious code in casual_ant_tomato-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04205853e464e6242f11f2900b53543b65aeaa4c72e00f84676684da6c30aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74767

Malicious code in darkchickadeechocolate-80 npm...

MAL-2025-112329 Malicious code in sole_guppy_scarlet-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b6340f7135d49cbf460593d0554cf180e3f260e284b3172a0c37b927045aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111638 Malicious code in acceptable_salmon_moccasin-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6938617ba1a5977563b98a08fa6d4416c07975ea275c849b2c2b5bb756244d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109075 Malicious code in standard_possum-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6f8e732e2ddf0714236e9bb2e9115c60633c2259e0aa18540762eae4aab95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...