EUVD-2025-86130

Malicious code in fadhil-tongseng86-kyuki npm...

EUVD-2025-61083

Malicious code in zul-klipo84-riris npm...

MAL-2025-85453 Malicious code in fajar-ronde69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4012f7aa2741383f857f29f55f669ee2c5b477831ad40f2653ae03cb7c225635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90384 Malicious code in sari-mendoan23-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d950a49df44f39172db42a37cbd95cb4e069d6f96f92bd1e411e13a38f518cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sambel44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a78675fa150936590644e4e34ef0d8263a43134cf15f5be02adcee29076e7f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67770

Malicious code in potentialhaddockz3n npm...

EUVD-2025-85189

Malicious code in kresna-kue37-miaww npm...

Malicious code in vera-tahu3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b7cd63bd7577efae7714c5255bd3b479f8b0fdb61c0c618e0136fcbb93f4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67336

Malicious code in relaxedharrierz3n npm...

MAL-2025-87996 Malicious code in lost_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702f35cd38bc1b8a3a80dc265fc07d9949bccce9aa3404337e70b7f39b0ce262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84023 Malicious code in cindy-lumpur90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87072a5423dcd6e2952cdc568fea3e3f92a54bb4b5e68c2730653129b0a38774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88994 Malicious code in ocha-kue66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3ca79f886d9f6284ba9bde91a5b811660156484b8da80238d7f339b2e87103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f73ce9899704abca6d8c068ac797550bbebdb93344bd7cb0ebd04f287c3c7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89401 Malicious code in patria-klentik57-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b50cb0def28812b9fcadb3d6eb7d38a9125d7c4c100854f6f2e9bcee5515c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67728

Malicious code in profoundsalamanderz3n npm...

Malicious code in joko-rojak57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc44b6dfd1d4e95f071bd56189d3ab13823b9d34f3d54a0e9393a6c595032699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-liwet39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9da158a7460bf603440cc53df0d56fec1fd787bc2439b7baa35bd52a89e381b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gado-gado89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bed20d885c8a254a8e421cab3f56aa263a828621571acffcb8ce318b98928a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82198 Malicious code in watery_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2ee9e7fb0fdeca7fd89f1448ac1045897f49a6da95a1516b2d5e2d9337f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79741 Malicious code in loose_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6e2263383273bf7af0002016aa232964ac2f68abe4cc338f4a2523ecacd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...