MAL-2025-178304 Malicious code in riya-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbcaf16bc5a8558b63d5019efd2977ebcb7d943695a71af6bfbd5a04fd06617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137068

Malicious code in riya-24 npm...

Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174760 Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47488a1540a74b92c02e693ae6d6b0d181e0b8371fde97aa064e6c4a7735a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146220

Malicious code in yuda-24 npm...

Malicious code in fauzi-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895e8ed427474576d65315d3adb9d50dedb204151c3a9759915512a16938d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4c7e52e8fa8103fcd111e4c8990207b46b8dd7592f25deef15ffe81a8f05b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146264

Malicious code in wulan-24 npm...

Malicious code in pitra-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e078208a3bb789dbf1a692b9655d64a720bad1500540a5b302bab4b0164131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170548 Malicious code in wulan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c1881dd1f00fb313f7635332e2e2f8f9c4d57458fdbe0ef28febc1aa071b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45607ee12197c102a20dfee933e10086242c7ce737879e9a9edfec6c1c5cca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b8d31f5606bcc5225757c7f1bed6fcbc71db2d88df74a5fe546ae6facc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf08c5c4c980874aba942605e2ceac92e1b92606b7e2412468ae48ee3f091e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21ff3c876273f7f9d75db3e0746d2dc356b1aa4497112b37b82005bbd841923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9d1e0265cb119e2ac42ce065ff974863d35b84fdb1d766a6660468b2a6ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde909ff96d2f5afc6572d147da91e7b050d351e148db7e9d90b7080635942e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...