MAL-2025-129374 Malicious code in pleasant_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21090639eec70606adadf0463d687541d2326caf75037a81361f2c3098ca7c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129914 Malicious code in rina-nasiuduk26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68255e0fa61e110698101be543f540243d559bf0e3a5d5f88b93fb7006b740de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131317 Malicious code in wibowo-jengkol18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615ec522cd514774cd35b283599f7376b3c2b3d2991db518600ca30cbc73f304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127891 Malicious code in kiki-kue51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a03b77f79fdda79692b68c1e6273796c777f3c9d6ec254c07b0dea0e35a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125439 Malicious code in cindy-lontong13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ff698e897d42de4f40d51fdfcc4315b8fa1d6bd1b9331c4d8873af7cb02bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4241ae0daa60c4a387621361b1ecd5ec83fb655e7e15b79ae097621cdbf31a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb3417a86f1b4b081f659c850393d4eaeea03a954bce3244bbb4c33d59bcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-tongseng91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d695b0602834c8d32c3be6663609552f861a5bb14a3e124f6504a99f0e742b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kacang42-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7ab379f3a0be0898bae5f9a5ba828720fffa35dd4091be2b8048fa5d041f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f316a1bf001c87a228b73e6bd8e02ce7c56b99a951d60234552eee9c84e688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-menjes39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e51cee4b56bd2cb332d24d5ca38e759802a7dcae22bb0490b62f465c5372575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f469bf8339b28e8e94361f2a30ec1a9ab233d6305e3aa22fe9d318ec5431dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-empal45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb22b138cd4df958a43233f0dac4b36508fc71c96b583d30ec98b2f7dd9920f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb2e027a2b256ea9f1801586be8fd75ab87d35563047c3cd99a077c3726a584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102632

Malicious code in riana-mendoan50-riris npm...

MAL-2025-128610 Malicious code in maya-serabi70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b1400dd273ababc040b053b334e7ebc7f692419cc126ff0be5a3632113fcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127027 Malicious code in hadi-teh93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2dab5fc89c93e0435319ea063e7f773454d18f841fe1b6b3f800bb4c63d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126721 Malicious code in gastric_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b64def9b3122478aa38266a25a874e883cbd3396ace878c1c1f2a19be16683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131237 Malicious code in wawan-klipo47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1e9c58b3cf2ffaf015327e7e9ba3ebe3789b24c48f1d9fc46301edc3b2f395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130053 Malicious code in sari-sambalado26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2658f2576b415c276aca2f25cb69ba04a0b55ff8615d885b0f740a0ab1c12a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...