MAL-2025-91599 Malicious code in utomo-martabak48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1884a58728912923922a65122665b88a2f263e16a0286d03fa89843bfc8baa54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85001 Malicious code in eko-ronde38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58964642f82f7f22461f0cdc6220b9af359d850b79775807474309d3b5afbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83723 Malicious code in budi-keraktelor80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d415d09a424e4a1d6ad130c315f6f161856b2daf2b51444fb5551b92f7286e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tahutek86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57446f331a5c1931b848258d46f8c886dd42d1bb5bced912fae6765abff0dc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d087cbc2f0a6368e1d354f0f914f79d4977cec5d52a0645d42bd31a8e3dd02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5275ba1ce01ca23334c1bd8df012e487788095d025a6a972bf5a0c8e15a418c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85209

Malicious code in kiki-wajit16-miaww npm...

EUVD-2025-86376

Malicious code in eka-kripik48-miaww npm...

Malicious code in iwan-tumis33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08816c19fe37e25792fbfbed788ea1ee005ceb52775e9196a280da2b3c51e7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-mangut39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31009b1c83dc72a3c838eef0ade2777c5f8d4c3de343ed46ec7f0e8b115ccbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-lepet67-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c38f709246d4a08dbcac03416c38f190586d0b23231caff3ed6e8626605153d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615e351dbe20bcd7aa119948f94b459d6adad659e709f34880705a79a31393a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-oncom10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce021858008fcba4a77a1337496764b513410aa962193f401165447e1fc95b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kue18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86466e3b00799180b189abac4b143a067183b543dc5f841191b151ccaa3db110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c8fcf93e72ed6e1993028760a9b018122d9abea5910a6178d740218068f070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-gembus2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a33112f40932c20b8728f4c2cde8a479d183a058c9d9649ea9a7de88f9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5cdaed7e8fcdca71f6fcbffa8670629b56df5fb678829b6ab6c39ab391dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-keraktelor87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668679f8c0d163e3958f250f1616c3c2a7a83092a7709e5eef36f4c9ce45b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...