MAL-2025-104851 Malicious code in kresna-bubursumsum80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dee103bb0b632f888a162fe180fda95472d51b0ed4b4e47ee358b68c646451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106647 Malicious code in okta-nasicampur71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57e20a9ab7b55243e84e6a3a9d8fb179c2ca6144fa9298842306a84c3e6063f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lontong2-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce4361bef9c6fc8b2067ad206f4b51d3356fefcda4d24c443fb38f299dc3ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-takokak71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64880e8e2dc170b978132c831438549090687886124f237a491daf6957ca428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c07850c22f2164b0e7b057b0a546e9f83231f2c1edcad15e53d5c445d484ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84130

Malicious code in surya-klanting11-ruro npm...

Malicious code in dewi-semur67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797f5d9da60b469a0365738a006ccc68f5967830dad70080a7b338ba4338b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-rendang66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8a6e408ef64dd5fb0c8d4cffc6ade8c832b7a2e802ee49b60d2c3fcc1aa2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-tahu89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acff690d192f21d0095bfa2f4d2c0ce6ae0c6ec9c08a031f7fd38782eb0434de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lepet9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c95e47c6109c591bee7f52599fd463a489d65b155d26466a0783a02dd8f83b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-brengkes70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c68fda19c060035694496141500c5f6d35b5aa90573a364fb15618335375d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-bakwan19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba77251d474fa7ce64180d1345a3f304e84f9fc701e53674971cc5196b219d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-kentang20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1af068a09bfcc36daa7a3100cc5ab7e93cf60f93ddcdb348ffccbbe357c06e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-oncom100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ab50f62d9197864e74273c4370c8a1a5ef93f0e085225f26da533041625f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2c28a41513cf050399552ca08a084478e1526c180f4666ab9f6ef0014ae0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ubi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0be0d559205f65d5e9002f51b459b562157e619d9ec6e139c8ccb64056e1883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in judicial_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4166946e32a2269b4cc209b968ec0fcb597a8cdcb69cb2be17c1e1c922511ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-pisang95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710a3c24f49ae49b187a810d692f539f858b1b708aacf117e95338012aa3b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-buburayam89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2d8ccb54e709385a9d3f27fa0f008b82a07cca635b4551eaa2e52bbcca9ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-papeda1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9ac9495dcfe1ea198e20dd69c7cee975a69c6010838ae08f7bc10ccd1b0ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...