MAL-2025-89158 Malicious code in okta-gulai74-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb71019b3c906b67a37e5be58f48d9d0e14e65761202a58ff98c3d1036508e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tempe63-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950f66307c2a36c68fe8ac4966723213ccf7bfcb70fe41a6be12e3ffd8e32612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tempe4-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7916642411af5f4e9c7a41dd090c3ca3aaad9734056e545b5396ef2167c996d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65641

Malicious code in utomo-otak-otak38-apidev npm...

Malicious code in okta-tumis70-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa112f305a6c1ac97f5ceb0baafbc64523137f1ac2970a3d1005c768634d253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-klanting43-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b200f91229946fa727619fdf25c2ff6c33e811a1e212ec51a3816e900c5b6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gulai2-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbbef76e2c1dd3681bc01975d17c556f5ee0ee650254a75de5d2b8c1c5335e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambalado25-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830e14f3181c89d05a8204ee9a302efddb720f905fcb7c8f82cbd2c0fa1f9832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-lapis31-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35134761ab4a060b75c91b04cf7bcd4f3f6902bbeba43dda48c1898504ab2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61135

Malicious code in zaki-sroto45-apidev npm...

Malicious code in nana-kue79-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1cf8b4e0b7afc10b7ba5b9eab82ae6be40f387fcbd6184e34896ad8f6bbcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-telur62-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982bf4e23ec6fb689bc2abd553664cdaf57b7424ad168163c6bf55ebb4226225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66427

Malicious code in surya-gorengan28-apidev npm...

EUVD-2025-62262

Malicious code in vida-keripik10-apidev npm...

EUVD-2025-66580

Malicious code in siska-telur6-apidev npm...

Malicious code in rina-ongol-ongol72-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd030ad53dfe1b01afabc189f97288709c725caabff95901a5ed93d2d063fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61106

Malicious code in zul-bika92-apidev npm...

Malicious code in surya-kue100-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e870b299d7069e66c4a802cef6b084b65ccca37ae86ed7f1c4b72fa86a32383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lepet96-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb940b4b8d8245e548b4f374c7dea373e9ba0b043b56e3f77d48537f6d94bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kepok52-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b372928c7c078f76ca7f5fb63c775ba345d579f3e12a7b79bc2b9ed294880f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...