Malicious code in lutfi-enting63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447c0e80c62425333d0b982b544cc2bc9afc58a5e00c6db37bb064bd59068ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67869

Malicious code in patria-getuk67-miaww npm...

Malicious code in putri-martabak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfa11c2b04c468ee0889927b1466af7e9f7de567b7bc29237d9a9144e7e3aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8049e1cc3d667e610b4fbd2e400239ea8bc0075a24f99f95798405a9c238de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-sambel41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3decb948f474fd172f6277afcbd9f6e7b9afaa367a80f437fdadc6d6e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255cfcb5c7b304a375c36715a9a509b3ebd3bc8ab9f5b88242a6466c09535b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-oncom84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792cfcfe87179d7188d4ae9ea0bcef25207624c3a02e063b0428061fdaa029ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klanting72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6e87fc20b626a9b7e208258b2f266e4b186b444844673e21737ff5e1e872f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b5ba877b56043d681cebc1644c2329261cc43c09fc9c9ed58810fac05f2332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-peyek68-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444db34977c4f4432fb64f2eb63effd2d836976d0aec36a7286659df93de845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-martabak14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72466831166a82d5417b58d0e2914d3552d21bd477830561e161a80199f5d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65514

Malicious code in vera-tahutek89-riris npm...

Malicious code in tiara-lupis59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718d0c1b59f5ba1a418edf812e1f31e8d514b16191918cdb8ad514eae617cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rangi28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50dccca73955adcf7ad385b2f0efbe41cf2d9ddf6f2b4c134c960d8a03ed918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90078 Malicious code in rifqi-jus49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48857d784fbb325648b6edb82ba679eaee628ef83e6170c883f1e0c7202fa55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85328 Malicious code in fadhil-jamblang63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f719c78236dac3aa21d86cba661eba80a702cb5735034b4fe07adc3c116e7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84118 Malicious code in citra-nasi63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f33dde68e829a5e542568eb9a8acf9c68a650a494285b5622329b1e80a81dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88623 Malicious code in nadia-ongol-ongol10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc46beffba9ca68c39ba83081938cd242beef7f3a59dc2200144806049d07825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83324 Malicious code in arif-sego84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8818ee6665d2a469a2c61416f0f4e31801cdb6c44819cf4b3d31117f4256fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85842 Malicious code in gilang-keripik85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f37e17c34687a7d7b2dbb0241ac7dd48b9fcffb452fef7e97a0e118c185df19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...