MAL-2025-111224 Malicious code in yanti-teh48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3598603833fae54fbb54e5a6a8ad31169dd9659ab702fcab5165d4dde535608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103147 Malicious code in gilang-mendut53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a1f7629c25876d3a11ecb9e3baafe6beaf7d6ccf144a040e78cfa41e234b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104707 Malicious code in joni-tongseng23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ee5b7953940016963fc62013a0c4291642c0ae34b6cb481b6a214011ab8eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110883 Malicious code in wibowo-sambalado6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e496526dfa22ad38b620f5e4be203017348f8314df1052b1272ffda7d2b02d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108272 Malicious code in rudi-miemee36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad2152ff0ef6e72cb660e4dc4774afd29273ae1fefcb6540b1394a73dbe0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108536 Malicious code in sensible_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4053ee9ccfd64df6d86a16dd8d0b6d7705a068295b273da9fd8bfdd37593b623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108771 Malicious code in siska-martabak87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417d787e03f142954f01b299e3e27c95df9af66bb7ed0a5428e2e473d7686b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102198 Malicious code in erwin-botok9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf1552ae5c97e1bdc75210cd0a61725c0c731788f0f2a2c233184a25ee01aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-buburayam64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c5240471a92bb15e8e3c6abe5dbb518c3ba045c87950243f07cd9507239f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e4058a93e6e7cc23d25740fc840df2e4c789f30c63eb19ca5b794666e5c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-taiwan85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b95b6c66cd0f2d09278a949552d018073e63ccb757bc1e35a48710de1407224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-nasi15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7336c465c819a0e8cbb387f3e5b51e882d0c364c9fd72ac3f1f170380cfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76250a16a4745a50662f42df310ba06ebc3e17fbfda817ba4ffe134e4ea02ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tek42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455e87be682100ddf0b0b3588690b7f416c403d60ce6278ebcdaa2946f26502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahutek62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44c8a5744d1355fbd8ae39c2989a67140d1ad48a160e2ac7141639c783c1ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tempe75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39a54fc0b20b1c433c590c29c0fbc761c7d0ea2b1752d72a00b1ec85723551c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-gulai75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a2c86aa7d799b4e2b5671fbe68ae132aa15686a75ae2352db00dac61a0f026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69857

Malicious code in indah-kembang98-ruro npm...

Malicious code in ogi-ikan68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b462f1dca276daa655d11f5cf7c1eea86053ccc68b031c9611183e2843e565c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasipecel40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e7e45bd6e254b1e7b90231eb66e537a48d72067a066a93b1ae77ae45a74cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...