EUVD-2025-69960

Malicious code in hendra-sambalado60-remi npm...

Malicious code in uptight_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04911c6d758a236dc3996b90b67ec096ef60ffe1bb3098c1958de402d40cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-ketoprak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190a8c3c08461fe7639326afb743eec4f152894befe129552e6d39fc187cb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-brongkos66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1ac1024f6df5de9161957260bb8a7736af1fa59726b6bf176fbab1676a210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-otak-otak7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c0c81c59330efcc7c8740c70fcea955c61c40fa9fcbb500ae1d1c8b24078a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lapis84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180fdc108bfda93e4498e2b3a41fb4bd6d42210ee4935d159bae67bbdba7219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68191

Malicious code in rina-kue18-ruro npm...

Malicious code in nana-takokak79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d752868f2884e9d53ede3bbb60b9ba88ca9338221f69c0c667752b2ee65c7a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lapis36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ad5f8bf6c657481ce6989a29e71899810481acca6874ec12db99451bff9895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68225

Malicious code in rifqi-kolak30-remi npm...

MAL-2025-105554 Malicious code in maman-oncom59-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf01db3d313598a2dbdf3bb5a8bbd76e16e65f2087fc5342330675a59c78c0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-keripik76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd49737660b12d4f7c8d3485c8ed6d4a80d35df845d71e110d51338d5ce7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kue69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6c0522d2af89ae87a9d43cc8e1bc97f0cfb0e05ac423e9ad53d8c1532c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102761 Malicious code in fitri-gulai87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb20125264aa75716d38580a8066a29e5be368b47a2b2f234033916a182fb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111469 Malicious code in zaki-ketoprak93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852133bf09c4c845497d6b949bd9e8c847019e98d8c7b0dbff1418e2e718e031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103147 Malicious code in gilang-mendut53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516a1f7629c25876d3a11ecb9e3baafe6beaf7d6ccf144a040e78cfa41e234b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103658 Malicious code in hendra-gandul97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b3ecd93466f6c7346cee6d3dc53cc910385c4e590815749b002e23d3e59728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108650 Malicious code in shy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1474d3dd978f06ecaa9ce192dc1edde34784068b7ffe90ee33685e08539ba04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108272 Malicious code in rudi-miemee36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad2152ff0ef6e72cb660e4dc4774afd29273ae1fefcb6540b1394a73dbe0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106029 Malicious code in mulyono-serabi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cedb6cdac8c944367ce9f85f703c976dc01e46f5732f504039c38faf64ba24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...