EUVD-2025-103221

Malicious code in okta-rangginang84-riris npm...

Malicious code in psychiatric_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a51d0bfa615a74adf249c751a798baacc8e78948b30f50183d4c8af90e6edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528262d79ddbc84cdfb1650c1f50cefea655e9d46ec69729155781e5f1e3ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kripik72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a81c3552a407c208fabe87a0ea6a5d00c8c3caf65a7471cb19282f905b74e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tempe82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aec9dbb61209a7582365d8050236c16327b2c5c17f6b221e7f23fc9ce7a4534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-keripik47-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95049907ea87cc6375fac996f39391f38993b0a1ed1edce1b725d7f23a63d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lapis18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d25570d6bf7291963620df6996733e9d6cc5d9c18db16dda6292fde6a08cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d47a7c03b719d0fb8467589af2a62bdf378d0033a92c24392ee922bb5343a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87a13ed184e3db56a69b2496cb8c070c11aff5c7f0bf651329540ce91ced169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79190da381c597f4124c7a2367093fa8add2efda0ccc8023ea7347690105413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kepok20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9674d2e9b81968dd5c4cfe240934b21276ca461acbdc2e9ed96fb959b31907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5914fe16785d75fc0eeb7dbb1b467fcd186a66c9f269a116640d954c2051b0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128991 Malicious code in nurul-pisang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0749caec4908dd1a07a03ac282c0c925bea3dd5514801e4b329995b3584b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130857 Malicious code in unexpected_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7873c3dd3a8b696a61d8198715dc50a55692466e53ff21a6f9c13fd11d60b0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129576 Malicious code in putri-nasi65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583598dd1e730c98612624d710a45bda5527bcbad2e2e097793558d5234b9f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129772 Malicious code in riana-mendoan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f281285b32119e77c0a88bba5a0636a924ecb89e102899f6ed8baecde075325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130032 Malicious code in sari-keripik8-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4169a8823b7a2e1a31c1d77dab430aeffef7fa7e980014b1f6ea29779f5f201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130491 Malicious code in tania-tahu33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e57e75de57fa09f16cf0c030d85833032a4eb7caef4a3c74f65e25c3475c4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...