EUVD-2025-65820

Malicious code in umi-botok99-riris npm...

EUVD-2025-86566

Malicious code in dewi-kue55-miaww npm...

EUVD-2025-84565

Malicious code in nina-lengko46-miaww npm...

EUVD-2025-85810

Malicious code in grievinggrasshopperz3n npm...

EUVD-2025-84554

Malicious code in nina-mieayam26-miaww npm...

EUVD-2025-85755

Malicious code in hadianto-gulai53-miaww npm...

EUVD-2025-85793

Malicious code in hadi-kepok10-miaww npm...

Malicious code in enchanting_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f21f6fd1cb89f32ab18dc565faf7a14ae7d67b2537800ddf18d8da031cf398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceec5a5d9eaf811554f8513e8923edee95a9af404c16d7f9a2fa5fb05bb6fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b35df22397ae090f3bb8c05c6bcdf85edc352ca81691034b82131a9117168c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d59ba7efe8cf8657d8db86258a2fa45142985500404fcc06f0711e862d6f167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebcce9259c5ec67bff100b11fa236ac71ce684976101d14a9b3aa60edf39966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-semur66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f962dce228d288ec04a651e83849bb4e30de3b105b13e1a6eb36b2a6df287797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tahutek45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a99c030647545f64bbc10e959d38ccb69ccb97054e6ea77384e9074c56ae0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78381 Malicious code in genetic_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8def89c94abb20c39ff86aca6aeda3aaa2df35e34f4f15bc727cbb0f7c5695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ragi83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902b126541621cd8cede05ff81c42e8b8f233ef30fa8f5e2ca50217e5408f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74975 Malicious code in putri-gaplek5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e720f5aa94f02c0308b1a1afccfbd5194d1f84c88e8adc5b1c4b7c282d6181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51014

Malicious code in worried-tomato-firefly npm...

EUVD-2025-54698

Malicious code in effective-bronze-junglefowl npm...

Malicious code in eastern-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9149d6e69ecde9b2b2bba6d96e3344b404209f74dfd4a68e03aeaa250ad58d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...