MAL-2025-111080 Malicious code in xaver-rawon81-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec665abee637b6f56992a750ebc76a65d20cb06cf55d95a9cbdb17024973ecc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99454 Malicious code in andi-pisang6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843b19adf9d31d8b4a0d32694d9e0e2f38ce8a31c07cdb1bc43cda88ca6b8d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104885 Malicious code in kresna-sate87-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a671dca0e958675cfbda2d06020c01836e8535e9562e18e840b2bb09126608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44143484d82661a385ec5f9a0495f578493d152eb89d79e5d94f4e7a6c53dec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8e8a58848f568aed7ee7d9c9b5f1d0fc5aa4bef1af1f53e3ee0db030508aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-papeda18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21cb210291d7f584bc07f2322ab2b4e0631aecfbee38458cda09669f13be3075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rujaksoto45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46505eb8db21eac8429644e4f16562eea69eebf5ef741fcd072d71bef2f58115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539ee99b019b9fe38ec374bcfeae03a73f446ef289090093990ea1d69481d470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-moci45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c11f38c96c7d407db776e239b1bd61118832bfb1ffb46ab4b1f9d395f180312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-donat55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa58f87f6f43b5437b82cfe4b6922bc592e953667698e07b96e76558e9bce33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf58c7bc7f86adbc8551f8cbdecac3528546276079925967966f98a5fcc3d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68424

Malicious code in putri-menjes99-ruro npm...

Malicious code in indah-serabi41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ef6a867b35107eb7f0d06cef53ea852c830cd18c3aa5f0cae653eb0ecc6789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d070e3e2eca7e267b00ca65cbccdac1260d84648106d8fcf8a106fbdae10c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ikan26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d580563640f5cb0e9243cb5f09cf15aedb023b04b4a8e42b55b36b900b5248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-jus8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e03983315ef273997930a9474023c8de59874558ae722198f7feb2ff3a72b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb95bd0c82c1b55f7a30822965c03f0976a3fd8bf318898b30fcdbffb139f77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f367e3d39d9f05e8cd72f47c57a536f2ace0427870e1f3e9db10e3eb48d5e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-miebogor7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae42a92b982c019d74e379f42963069bde130fa5d4a7296a36c96c4420bb297c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-bubur4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6affae6ee1fd019ebb02c48d974bd7c24c8123df9cd1b7dba576393095edf897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...