EUVD-2025-85209

Malicious code in kiki-wajit16-miaww npm...

EUVD-2025-86376

Malicious code in eka-kripik48-miaww npm...

Malicious code in iwan-tumis33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08816c19fe37e25792fbfbed788ea1ee005ceb52775e9196a280da2b3c51e7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04bd5a90465181079537e5cf4c27d3cd74b428efebb99fa90ff504cbe472103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-martabak45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e825598cf9799868a9e8b5537185053cb1d7cd6ba93d0c20c3545fa5f0506f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rangi11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7641198f2a909f25a0085f778e0d3936fce4b15cb780bf328769f8e9256f987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2b4f07dae24ca6ac3dea75604974df99db556705d6f084cd91c7fa9a5a9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-gembus2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a33112f40932c20b8728f4c2cde8a479d183a058c9d9649ea9a7de88f9528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-serimuka10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4310286ca76e55483f43094708871b2e89999d24980b0ead99a6c48432badf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5cdaed7e8fcdca71f6fcbffa8670629b56df5fb678829b6ab6c39ab391dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-keraktelor87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668679f8c0d163e3958f250f1616c3c2a7a83092a7709e5eef36f4c9ce45b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kupat89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5d1aef544eebd618c759d50fbd03edbec14bae58145a381873a8ecb9632c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-esdoger45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8a6208be0e4d621e92468d04dbdef2aa072b4f239a8158871ebf5cdcde1a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54faba2d66d09daabd9baab9edcab2d59ac00bebd22b8b77a8e5d9d9dc1ae472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31460fe03259c7001a94b09f3edbbc8f87bac8fbf24f09da672eb7012242ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-takokak6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adc0e88333f76bc55b2712fec1017c8b0a9505562bdbdf531c4091bfbb9718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-sambalado93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6aaa4f02cdccc971801f6d80ca4097403d8900f79c9d9366dcf8b218c9e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b479ffcd1fea142b0a83f7948d010c57bb43694a2d0de52c37166a4a956fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86773 Malicious code in irma-ikan21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77370d441ea3f0e8e277b6719c4101ea0dc9c58bf66d59d2833750541bff329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88735 Malicious code in nana-taiwan63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58f937e96b040c0f13837a0f328af1b2eb8bccfd09882188e08659076d623f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...