EUVD-2025-67821

Malicious code in patria-ragi4-miaww npm...

Malicious code in joni-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b3611d65b39d9f5ae25b9bffbbb0dc5e8aedf5c5f63665851a6a03b3855206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mieayam47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb8350dbe5e68d2e134b1abfdc85dc67d74fe0da90c3c5a2bc2dc6fdf4cc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83378 Malicious code in balanced_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0806617c7220615a62ce12a96b64f0e7da3b6dcaec53474b8c8fe3abec4fa627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87723 Malicious code in laila-rawon85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ff6687119d2fa81d36990632ed5204b8bd269f1f3e5be91976b63dd004bae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85569 Malicious code in few_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8297d2e750abb6a7e18b73daaf8e08c202ce80227d7255e077c2b85258fbc748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87586 Malicious code in kurniawan-keraktelor71-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044a3398fffe0e421f060a748a16357c02187dfe2563a1c96acca886f364b696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-buburayam90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e48f97ab72322aae4f556f44252198aadd36264853a4b9f62631e2f88c8a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85017 Malicious code in eko-takokak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af9b856e9701cc75a5b2810e04649b6dd4a0b1d2051d5c59ef484f00482caf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67209

Malicious code in riana-tongseng40-miaww npm...

MAL-2025-90978 Malicious code in tania-tahu74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e34e1f1995b570626f3277a8b3a7a864d68b50ff8de47f01ddc16fa81146b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90912 Malicious code in tania-bakwan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b2a6bc926b20ef44bc7704ffbd4eb9c89bd4be29cd4dcf02a971908ec467b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88126 Malicious code in mahesa-dradag66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91130786ea628e3634ac6ac49c81a96f759dfc6d9a5802aab3e5c9230428d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92248 Malicious code in wibowo-naget41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0debba03b8dabad96cc6b2f90be0432b49ab4455793587af51fc14851463c29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85067 Malicious code in erick-bakwan99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc50ce6d67f24282a7a5f27fb76d88b06c37d700f0825cc48d41fca15c38585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5203016eb9f67ee06272b2dc2c75c3bb927458211e6a988b41f7dce033b5be4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-sate11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1d346eb4ad4a19d26c7c5834755f513c6c55e6e968f612d18a75cc6abe19b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86dd05e7b48fdfeb556fcfc35a70a46c740368a38779bb11b7126db65392a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compatible_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aac97b621927b5ef717309484df1ee8f6c294acaf51f200c5cb8adeae514669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79764 Malicious code in lutfi-getas63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f033f357cb4fd58b81d38bbf3b37f5fcba2b499619ae2c6ecce7f3886a4e7b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...