MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129848 Malicious code in rifqi-moci84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c15a93aa0702a8a1fa555932bb4b9b6a7bef0115ff4bf0e75074751f9df466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128896 Malicious code in net_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc9d5701866d13a808d6d3dfbcbe8b69f710970c16ffd40427b6260ab505f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5038e53eb51d695627c84ee20c4c48940e1e53bcbef3d423786428b2971945f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130919 Malicious code in utomo-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d215964812e50b2784141b1fe81acb4bc3fb483ac2abe6b4e3553016af72431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131750 Malicious code in zaki-gudeg4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0917a99ffd2aa898d347e4cf4c4d1bc24de325f5da84a3f5d2a49a935dc88101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127100 Malicious code in hanafi-kue28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcdcb929444aff1ccf801f7ad0c809a002045c64888cfccd68eae09ddbd88dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129778 Malicious code in riana-nasisayur23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56fb00ba280e771c3af1cce6cb4775d0a1894c6b4545a487ab4b6b7f69cef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130740 Malicious code in udin-klanting61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef26232b92723016888208fbf24c4ad785e982b1f0a9db68698e073a78e0b369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in bambang-rojak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460ab2e87f2594ed3a19460a299458ca6fe1e3224a54f369831f1d2d925c41e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakwan11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1071364a90f6a7537249eb30dd0b58bdf1ff1dce5bf2967c5843ab24aa939ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-mieaceh35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52379bde86bad6476b7dfcf005241dd1dd038d65ffbbe8617ab3efd44c7f1d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f2f847bffc9738411d7723dac0135e79230adc42b1546e1c95b28ddb5c7276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-gepuk5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ecb67fcf7ef913fb9c1c2cd887e4f07812c8a3975ccd01cabc1594d02f837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-donat49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4510c8c7b465b8c7a5a5a46b6e449f9e1bc2778dfca435fc6c8d5d4b3259602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tumis48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 231a6ff35e8f7bacf5ec0f95a9e3f28c1c7cf0ba66b9084ca3e2a3cf99e05da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...