EUVD-2025-85180

Malicious code in kresna-peyek73-kyuki npm...

EUVD-2025-66094

Malicious code in tomi-liwet56-riris npm...

EUVD-2025-86763

Malicious code in citra-getuk85-miaww npm...

Malicious code in rina-rujak1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e77a6f9fa361d90ef3661713c0ae7cc8ba156e533efc894cec9610be431c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88590 Malicious code in nadia-kepok45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9f1fe13ca3b766df0304611888eb4bb941982300492eac5a1f9da03bab553d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11986

creationtimestamp| type| source ---|---|--- 2025-11-11 04:22:06+00:00| seen| https://bsky.app/profile/potato.software/post/3m5dbypdu552r...

Malicious code in vida-teh64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5abd37e1142caf2d3f5eab3da63f65bf2885e67c662d015de51adfc0d5b952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a98fe6b8bcd6fe5b4d4e5bb18aa6dab5eeedcd6d320d19f4abb5c7e8e85dab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-keripik45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ed86cc0f85944bb19f095bf79756a2f422b9e73c6d029b11ca8de6d160fed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80087 Malicious code in mulyono-telurtahu58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca74390fd837ec4c8d938a96b626dfa6a9cb80974a307f6fe9702f65ac356c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81622 Malicious code in thirsty_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deedeb1f0069be517e852bdd173a3a6b90e6088bdc39d4d53c347ab316ffdcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-rangi84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2554676a0d5ea86344fbbbb4c3758c19a699621af3f58db13907007b3c8f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-naget52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ec72f41a93b4f0db6a343de92c06eb45b2f903769346df252c5eb6d34b92d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieayam66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b234369e14694efe63ec38d2fe8f2c3f70762de0fbb109aa47b942229b198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80851 Malicious code in qori-bakwan59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340bd8f740c13e53aa00efe3d71614f41b6c248fe7e3047549324650ad98169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78568 Malicious code in hadi-bakwan91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6968321e61d79a0d169a297bd78c7156a0b04f68cadcd60d94d97538730128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kacang74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f6458ce71f843f878e6e239a011dd001f49e4f1f50abfa81a15a8f8e430cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75753 Malicious code in tuti-dodol3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fe7ae25ff08debe9238212c6c66b8ef592dd3136b306d631c5163f6677da67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74539 Malicious code in nadia-tek73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b823f2a309903a8961c5b781f23a1e43d2be2ae2453069c9f17095c1b8ccd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74841 Malicious code in oktafian-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386191d6e8cd1e0747344299f543de6621107b909f4c065d948608bef9dc10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...