Malicious code in candra-taiwan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5cdaed7e8fcdca71f6fcbffa8670629b56df5fb678829b6ab6c39ab391dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-takokak6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adc0e88333f76bc55b2712fec1017c8b0a9505562bdbdf531c4091bfbb9718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-sambalado93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6aaa4f02cdccc971801f6d80ca4097403d8900f79c9d9366dcf8b218c9e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b479ffcd1fea142b0a83f7948d010c57bb43694a2d0de52c37166a4a956fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lontong72-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4949e868bad7b716cf01125724ad367e4e8d25638943a9a5c69a68944b6bc9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-oblok33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfb6e60dc5211ef6a20a8c3d49455f09e9978b84435f8a6712bb174d8fbc3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mendoan22-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74f820b3471e7546e2b9fdc60d8d128cd806cfe7ad0b22bf13d477e9b3d62aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-peyek73-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a0083b95c9a0d091cee23730807ff2a82b231178013a4865253b12d0186d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-84670

Malicious code in mutualroadrunnerz3n npm...

EUVD-2025-85235

Malicious code in kiki-lapis53-miaww npm...

Malicious code in erick-gaplek81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32345e9781b84ebb1a27f63e9f42d8691f6ab0595732e391f95623f5c2c03190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-serabi3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ee8edaf5a9a80bd69089387ae774cd339c7a6bc872aaea4afc08ca128d8cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-nasicampur73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f833b017c138cb402cc579c6ce2bf960d6734b60fe02f470521ed8f85844ce69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-nasi15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd21ea145186abe1cbc216ee9b2b73bef8bebe0256f3e2ac323dc64a18e77ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3915be70aadcc0cecc0e4862d60c19ca836b2e914c800b56f273a829d506ceb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-takokak6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11245accefb9987ac55df6f210c197981a4b66cea482ed13278282c782f80360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c8fcf93e72ed6e1993028760a9b018122d9abea5910a6178d740218068f070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89010 Malicious code in ocha-nasicampur18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2eff50fbacb65d16455f47c55aaadd4b3974836a43c1ec06efc844305a67106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89167 Malicious code in okta-kue1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc08ceb24979918e1344bc9ac10a689beb14f42806ebe2b6408fbe9b2fe322b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...