MAL-2025-108387 Malicious code in sari-telurtahu55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f3f154eacf36d2045f8f36592d8d3f1c3a81183ac85631ce9ad661f254f9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107341 Malicious code in prominent_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f137fdbc6e5b205ea58f893ae73ce1e675996b56e893f823a70c4bbfbb910c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111506 Malicious code in zaki-ubi96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce52cc06bec948158f42d9f9fe1107a71aa24008364407ae579fbe8b765aebb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104512 Malicious code in jaja-nasi27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a009a0b604b5c9300a91926ac9504688b9c8a199e142eabdf326a617608776ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99794 Malicious code in bambang-ubi10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eecac3b4b7a2f1fa17aa52f8aaba25b84979fd76f123dfd6c9d86ccb1b250ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106980 Malicious code in patria-semur93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146a02268d0f9444d4fbb2718ff296ce80b7ddbdb45dc2e064481336147724ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110006 Malicious code in umi-tomat78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8491bb44ada77b584f3f06ac4503627a283937725a2bc3949d2c018f2c9cfdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100478 Malicious code in cindy-mieaceh95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1fd041f86c1a436cbfed2c6d76bdc5b3e31c9a3650779746b11925f93064ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf58c7bc7f86adbc8551f8cbdecac3528546276079925967966f98a5fcc3d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-serabi41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ef6a867b35107eb7f0d06cef53ea852c830cd18c3aa5f0cae653eb0ecc6789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ikan26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d580563640f5cb0e9243cb5f09cf15aedb023b04b4a8e42b55b36b900b5248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68207

Malicious code in rifqi-tapai76-ruro npm...

Malicious code in oktafian-kepok43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d75b27f2e290fb6f28c48b4fc27a84e6789e2db0b0d267dc8871a8b5ed30db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-jus8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e03983315ef273997930a9474023c8de59874558ae722198f7feb2ff3a72b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ketan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e0424f781293255f437704687276e02c5c06d45afd12fb6eae7a046cdc69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tahu14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d960f84f90b7e91f35fb3264e851341d522f89a83e3eb0b08eb6eead26197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb95bd0c82c1b55f7a30822965c03f0976a3fd8bf318898b30fcdbffb139f77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f367e3d39d9f05e8cd72f47c57a536f2ace0427870e1f3e9db10e3eb48d5e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84166

Malicious code in strangeturkeyz3n npm...

Malicious code in siska-kentang80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a6694739fd7219f20c1a0a26c584a0768ee8cc16f8a4469aef0d3c520376b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...