MAL-2025-111080 Malicious code in xaver-rawon81-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec665abee637b6f56992a750ebc76a65d20cb06cf55d95a9cbdb17024973ecc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103225 Malicious code in gita-rendang50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed5ccc07c484e16fe61c52ed51b2c94ac86ce75cb8341e15d74b3a689998b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100478 Malicious code in cindy-mieaceh95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1fd041f86c1a436cbfed2c6d76bdc5b3e31c9a3650779746b11925f93064ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102207 Malicious code in erwin-keripik7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75629f1dd3d9d7b84865c6398cc013a21e50354744f80ec13b4aba531dc59470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101974 Malicious code in eko-saguer16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8952c6b4727b73131517ecb715d66e50a74f81fbe8539d583f57ff181da5d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-saguer38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c2373dcbc978620c6c8659765cebf43e178078e8bba8126b7b1386538dff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tongseng40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ce214168033585142537c4d0ebea2d24f4e0172f751264cd259245583b2cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-buburayam64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c5240471a92bb15e8e3c6abe5dbb518c3ba045c87950243f07cd9507239f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e4058a93e6e7cc23d25740fc840df2e4c789f30c63eb19ca5b794666e5c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-miebogor53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bfc973bdbe00667931c4e3c393c814c3e1ba549c3dd7b7e567d4560ae0e951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-taiwan85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b95b6c66cd0f2d09278a949552d018073e63ccb757bc1e35a48710de1407224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-nasi15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7336c465c819a0e8cbb387f3e5b51e882d0c364c9fd72ac3f1f170380cfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fac43bf4482d35c2a00965c1a95a0ccc6ad6fcbd14c0b305d0502a64fa5aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lapis85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f45dc89cf9a1bf0ac4db4f6511c0d17f1cebf272199c38fd656cb4dba2e3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76250a16a4745a50662f42df310ba06ebc3e17fbfda817ba4ffe134e4ea02ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69018

Malicious code in minimumspiderz3n npm...

Malicious code in fadhil-tek42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455e87be682100ddf0b0b3588690b7f416c403d60ce6278ebcdaa2946f26502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b69ad2a6e8f666ff9e2fa7d35d6f1d9051f961a86d77b2c57e506432880506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d68c21243a50606ff8a44db0fcf04a2c9af5c289f599ae5e0d6413c266522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-bakwan77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78225afe13c4f3df8ddff01be124014c26fbed41a9e1963b80c9feff4b88270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...