EUVD-2025-67209

Malicious code in riana-tongseng40-miaww npm...

Malicious code in maman-gado-gado92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ad29c51fa81fdba9c426f205640ca5a4714ba66168a2f2be6ff9037f512b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lontong73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36614dd2732539e5ec38cabde39f2c88eb2e62a12b3ccf0a7e7a74a0d5fa7deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kue97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29e028f6526055b8d0028198c4dd21f2a517cbc93e3eda333f8a0f4029f4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-taiwan50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a6dbe98e82a421f39160230371e06eaf9bef14c25e48651cd8c8bd036e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rendang61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb9aacb3f79e95b59fd88d732c4b5d167e5de72609ce6ec62efcd3c344fa579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6801060d2d2c6d3a190bc284d228526c53b84f40a6be79c925e1da73a6f17133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61210

Malicious code in zain-tongseng48-miaww npm...

Malicious code in arif-tahu30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e481a7b4f125872717a35eb56999993e8beeea0e5be8996539d07036766d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-esdoger45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8a6208be0e4d621e92468d04dbdef2aa072b4f239a8158871ebf5cdcde1a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-serimuka10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4310286ca76e55483f43094708871b2e89999d24980b0ead99a6c48432badf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54faba2d66d09daabd9baab9edcab2d59ac00bebd22b8b77a8e5d9d9dc1ae472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615e351dbe20bcd7aa119948f94b459d6adad659e709f34880705a79a31393a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-nasi13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00605651b70a62328b0fb2946b301160433a4237bf2dcc4e854fde497f62f0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85209

Malicious code in kiki-wajit16-miaww npm...

Malicious code in screeching_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04bd5a90465181079537e5cf4c27d3cd74b428efebb99fa90ff504cbe472103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-martabak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e825598cf9799868a9e8b5537185053cb1d7cd6ba93d0c20c3545fa5f0506f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rangi11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7641198f2a909f25a0085f778e0d3936fce4b15cb780bf328769f8e9256f987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-gembus2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a33112f40932c20b8728f4c2cde8a479d183a058c9d9649ea9a7de88f9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...