MAL-2025-86191 Malicious code in hadianto-bika66-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578a4b5018023257589004afebd03e1ba228e307eeaabce1902f582fdf0ad789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-getas48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca8d88ae28eb7c45def4a7cee35e2f3967504152dfcf478620d0227966af023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67695

Malicious code in putra-gulai98-riris npm...

EUVD-2025-67813

Malicious code in patria-sate100-riris npm...

Malicious code in wawan-martabak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85184c165481f6bd9dabca4f3630ac264ddb1158c24f62e8ce10cb63f351e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jamblang7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d12d76533b02515010322d3b384fbe7220d3c7c9cd1fb441b5c1f733f8ed9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-ubi86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2063dbc81f5743ea729e5efa01b6b80ccc9e37bda12fb525f4051502b64cb481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-papeda21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2f19063cc67e7bd441e91211fa70d1766f88c972560f87819324d57ad58ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67057

Malicious code in rina-rawon1-riris npm...

MAL-2025-83443 Malicious code in bambang-miemee45-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dab32bad5e963e5d68b532036ea97d35f708dee7d0364dc94721bf4b25a9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189acceb23cafd669d0e80f8a3aabfd35e213b748c86b0cdbec066d4bd010b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89020 Malicious code in ocha-rendang69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61663650ea73e3307ea6b09dfc9ee028109461c172c499c6acb95a1083bd968b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-jengkol5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016927b44c320a1d6e1ae4fa927f57b06d0fa9b47bad7a0921a280e37ed7cdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d7881f111e6dcd1d28f912e5b48f677a3451c12f060335d30a218b0c80239c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87208 Malicious code in joni-donat63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2344a7c8298da6f537d9e86eac5eedf38bce50f88bb94c77827055d7584ae035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88422 Malicious code in metropolitan_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17e4622ad1d2b6babad74e4eac8dc6ef49845c87805221e30801cc07d7805bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89346 Malicious code in overwhelming_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe48b6f3ab37dca429255a44b6bd34fad91a0552aef4e2fca40dafcdb0c170ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84907 Malicious code in eka-rangginang12-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c39214dd7b1d45aa8797d3ecd3a60e8f041ebcf89130b7b70ded972c833a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91156 Malicious code in tomi-kupang66-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee6793019cd9291c277c7d41ac3767734c353771388545474bb754047b0b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92333 Malicious code in written_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b85bcfe99b51a2fcb024d568963bfff5ce0da8cdfe640d9ebd761e929324a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...