MAL-2025-85756 Malicious code in galih-lumpur2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffd18a9671feb3fa0cd12c0e135d91a0d6745c7059a59ce86fc04c4f2709dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90298 Malicious code in rudi-rangginang92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699b4dfba4cdcdee5d8af948d5bd3d9ff34218ed244eb4ff7255e48dc3489e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89361 Malicious code in passing_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ac431b488fb173d1e288ca34414a399f37034c946832a86a738d8867c53a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-oncom10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce021858008fcba4a77a1337496764b513410aa962193f401165447e1fc95b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kue97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29e028f6526055b8d0028198c4dd21f2a517cbc93e3eda333f8a0f4029f4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c8fcf93e72ed6e1993028760a9b018122d9abea5910a6178d740218068f070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-takokak6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11245accefb9987ac55df6f210c197981a4b66cea482ed13278282c782f80360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54faba2d66d09daabd9baab9edcab2d59ac00bebd22b8b77a8e5d9d9dc1ae472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86376

Malicious code in eka-kripik48-miaww npm...

Malicious code in cindy-keraktelor23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884feb149329fc7d4d53babce0ef08615a27622cd1c0e05b874e76475d4da473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tek73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5275ba1ce01ca23334c1bd8df012e487788095d025a6a972bf5a0c8e15a418c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-lepet67-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c38f709246d4a08dbcac03416c38f190586d0b23231caff3ed6e8626605153d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615e351dbe20bcd7aa119948f94b459d6adad659e709f34880705a79a31393a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31460fe03259c7001a94b09f3edbbc8f87bac8fbf24f09da672eb7012242ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86018 Malicious code in gita-otak-otak18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf61d1445180a35cd9b748a3196c9cae1b9e91bb23f63bed03b01ae056ddb85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89317 Malicious code in opposite_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e3646ee897fac79a161557032035f6417985a7886b8fbbf557b2ac64685c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-keraktelor87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668679f8c0d163e3958f250f1616c3c2a7a83092a7709e5eef36f4c9ce45b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bakwan24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68b3256919a82db498c95b363788af4fafe19b85b74f8b8ef57b4ac2229d7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kupat89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5d1aef544eebd618c759d50fbd03edbec14bae58145a381873a8ecb9632c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-esdoger45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8a6208be0e4d621e92468d04dbdef2aa072b4f239a8158871ebf5cdcde1a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...