MAL-2025-53585 Malicious code in ocha-empal72-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b74cf828e319693d02df738bc9825affdd651c3a1735e2000771abbd02a193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-pecel29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e51b9dd9b08ec3a43db433d6124b4c9682d06330a09895ded7a980e1632a485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52828 Malicious code in hadi-tongseng75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a26c39d0cde8b6de8bc482488702a6118da3b58778d3557e4698b1d8bd0b91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52956 Malicious code in ida-takokak88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ad747a46061a380ccdcaa20dbccded8c5a2ad3af1c84b499a55be5464d9f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53519 Malicious code in nina-ruwet24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbc498dd1c231056b4b5bac8fe52fcf9089dac8208a7f62fc65ad58dac2b2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53008 Malicious code in joko-lepet64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0891cdebd6bed655d3c4abd10a788b9869c66672d2a2c94eec662f2f7dc12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51987 Malicious code in gita-lepet92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08e560c46126ef13fe6e0669a90914b3c2bb81a80f657be93f14edf48344207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52123 Malicious code in kiki-moci90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe9db44524aecdf07fa381818ea00f93229d48e7f8ce096d6672b40b3cc3f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-bubur46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7842a74d346dad5eea42dedfdcb71584f22650871730655bf1a616b7a160f86f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-38868

Malicious code in maya-rujaksoto21-breki npm...

Malicious code in kurniawan-pecel51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605c4f33d9027941e8af43f476f10ab544335d26134cf3035e38d7d07a146739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-otak-otak8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f6636aa857f097ba8fe39a422340544edcdfc7f55423f136808dff5de3d4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ketan70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984b2a2331c94a380df3475174f0f004df3a41ad8192bd93a44eb0623f7e40bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-lapis16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a52f7a59cdea608d2e3e1fd74b176bac865cc940ee1ca67670195f9fc2923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-getuk37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f4d288ec931c41a3f77ab348c441b77a5a1c449e9aebf2391c85555aa509f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-nasipecel96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b877f82d0b1ca45c489a17827584e1538e5395261a3676ca001356d976179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-brengkes94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de57512dfa789c7dbc5d0bca0eba36564509e9e7a22733d7687a84156e8931c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kacang25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15713c876c76c862a0d8d6adc9e7981d15827d89b0741feecc352ab9ebf54737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-soto83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0eb30507df0b598599ee8baf3a04c2727c173cb39d79a2d1228146972ef7210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53027 Malicious code in joko-sasag58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94d1700d698dbad877b440b74b055cd144b57308c890b47008c93e631eb56aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...