EUVD-2025-89126

Malicious code in rifqi-empal51-miaww npm...

Malicious code in putri-mangga19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2006bac18c8d87faaccf45e5f6f08c723973ae5245d165d1a3b550c60e83c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbing_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603cec23b92df219a8cca81e7521eb9f815109891f0b15931d9ac94d0aac7199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d14ee4d7736ee74cb98597fd3a5f08f43c1714a1684ca5043d41100b5dd213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008c75c484f4f4fa9eb42b55ee82a07b9b5bda108c4df6146cce3a62f74380b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-klipo82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d68928db0d1e4f3be8d06f55f1a890564026e386cc4babf06d8405e87722d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-keraktelor89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49121b2598aa1769506cf01518495adf6458b0f40ac54a202bf73779b138bbfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-ongol-ongol7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca09fecb848d09a28698c290d5e52175560bc4796fc2425815f16eded220413d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lutis66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d63359651655d1daab151e7a35f42cf95f53e2718fac4fb4bfe47fc81a654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-oncom44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f02bfa5974e102442d28222a707e8a46f31690f6148b0eb9e27bb818dc541c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b07641448ffbdec201330d94853a253e5888f0fbf8883fdb77fa6ec76260aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kue44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f854fcfa7033270e8fa10ecf97bb3abb985f69193322c64d7d803d99cdf7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115879 Malicious code in mulyono-mendoan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640628d2e4ecbd353e6851d8be945d070b770f97921ad4b4e782ed69e7316e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117796 Malicious code in vera-pisang69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7498f98792453dc00f77b27c01ff2e213948f8223b220a22f0cf0bfd56dd645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115976 Malicious code in nana-soto69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b98b3c9865048b7d56ed27f14fbeaad0f08225ae24bfc2c61186e5b3ed48e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116803 Malicious code in rifqi-tapai92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c8a4c808568f11e4d221aa1540be76ef01a25bdc5ec2ab0107441f9a424d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114988 Malicious code in jaja-pecel80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb08a6eed7fc52220306beaed8955a9e5469955434d6d3f3460a7ac9068a92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113597 Malicious code in eko-ronde40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a4485e814e82d5118a1358c418032455f179ea6581dd185c49ca5aa804839c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113602 Malicious code in eko-serabi5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19913013a6143d9ee3f4a6e7ebada6846bf9024c7f5492c876c2f916fbd4d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f2e8fe8811faaf09754ea3df9d64db92a5f802bfbd7a9be87763b0479dd09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...