EUVD-2025-69018

Malicious code in minimumspiderz3n npm...

Malicious code in suspicious_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b69ad2a6e8f666ff9e2fa7d35d6f1d9051f961a86d77b2c57e506432880506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d68c21243a50606ff8a44db0fcf04a2c9af5c289f599ae5e0d6413c266522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fac43bf4482d35c2a00965c1a95a0ccc6ad6fcbd14c0b305d0502a64fa5aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-gepuk14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36aacc8f9c71de90a168657d932381e6a32e132fb021ce839cf30864c01e532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tahu40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6835f719868d691f5df8526a5b4e1dae191098a03ad99a82bb77bea3c8f44459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mangut12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06c3ad73230c00cb2d48240d68a67b78b27a003617463f27d97eeb4d43f094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-saguer38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c2373dcbc978620c6c8659765cebf43e178078e8bba8126b7b1386538dff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110439 Malicious code in very_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1473beec6cc0380cad0a3fba0b7697ad32ae8df35be172bdc8271a37ef69473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103692 Malicious code in hendra-rangi53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461d5714423c7ee8e3e4282c354cb498b389df98276d8059b2150275bc04cf6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106519 Malicious code in ocha-keripik36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42f3758f8328dcbc18c8a2958546e08868946f5d044d4a1eb7c8a857107b874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108283 Malicious code in rudi-sasag57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc764b48e4db712ac05f0fafb1fa8c143131129ebc1b322862cf48a4177a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104459 Malicious code in iwan-lodeh83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a963a9920cc315400440f5a62775f335b4c760a1b0180b03522e7b7470d16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111080 Malicious code in xaver-rawon81-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec665abee637b6f56992a750ebc76a65d20cb06cf55d95a9cbdb17024973ecc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100478 Malicious code in cindy-mieaceh95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1fd041f86c1a436cbfed2c6d76bdc5b3e31c9a3650779746b11925f93064ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111506 Malicious code in zaki-ubi96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce52cc06bec948158f42d9f9fe1107a71aa24008364407ae579fbe8b765aebb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101515 Malicious code in dian-ikan26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d580563640f5cb0e9243cb5f09cf15aedb023b04b4a8e42b55b36b900b5248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101525 Malicious code in dian-kue44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb335894972332f2c3e0b5eae38008d77ec5da456b74cb542b26a286ad91d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104512 Malicious code in jaja-nasi27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a009a0b604b5c9300a91926ac9504688b9c8a199e142eabdf326a617608776ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110490 Malicious code in vida-lumpur31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf252ad441a1338eda1ea7df6717191b91430cad3eb2c89a12b3febbb4a2a7f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...