EUVD-2025-102659

Malicious code in retailwhippetz3n npm...

Malicious code in kurniawan-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786878b33f81483c66b40223a7502280b2b66eeba481360433900c0f9d1f6a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d47a7c03b719d0fb8467589af2a62bdf378d0033a92c24392ee922bb5343a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130988 Malicious code in vera-rendang4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b838afa185d85de018afa57572c686d9668fd521510994992dad3da7f448474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125100 Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129215 Malicious code in oktafian-klanting92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aed1ed1936d72c40c76d56def9cbe23d213a34074af007cb5decd0a8c1463e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125217 Malicious code in bored_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80ac62bd4d6def128a9c55d1b6facd760a5bce1e02500841ea0e578ae80fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127439 Malicious code in intensive_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d9da5ad0ece02267f55b8463b30039427fe57c77120c2439ef5fea8c79ea46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-dodol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacad7a1a9361bc681bae2102b2bd8a3798c8f4ffd08965f618d16f927032f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131380 Malicious code in willing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56baafcfba29d9cdef943ae53987c9910b95f158d177bc2c01a627421fab9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126060 Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125926 Malicious code in dono-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99552a3032aab82c481f3df98b4b8ebbbca4124000cfc784f7cb2333c2e17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128519 Malicious code in maman-lumpur33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aec5222a1291e594ed54031a5020656ff5ace68722804441342562577b654d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125169 Malicious code in bella-lontong14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1cc00c503a45e592ce351d83ea06a920ef5ff4ce9fa141efecef8f46ece304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129052 Malicious code in ocha-oncom9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eb88657c41ca5ae14eb83a4dba02a0fec7dbf62b47a6a8501ac1746191f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131364 Malicious code in wibowo-tahu53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d3a265bf3ea0ff977e0cb670120a054fb8840625ca85cfe42fde0993fc2f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129767 Malicious code in riana-lodeh52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f6fd9445bf434e29b1468a7a79c760d46a57e854220d8b756be21b1d2ab789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131179 Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126455 Malicious code in fatal_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faecf300896808110c8bcda123d0689c538174ac824110814144e12a6ea56fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...