MAL-2025-130358 Malicious code in substantial_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c9729ed158fc34b958be7d7a0f937ba185f6b8218e58e38c8d5b2065784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130725 Malicious code in udin-asinan48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4487d23314eda574e70277231f6d755aa00f124dd07ce9813cf649d0fc434b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125189 Malicious code in bella-soto11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a79a645c9c5b4fa9678b0224a0c7e2889237c271dbdcea2e68b3d85c34a340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130218 Malicious code in siska-kue98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f449835731f93acafbc65496164f49fc159c7ea84e1ff65ca9b3bd2d26824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130053 Malicious code in sari-sambalado26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2658f2576b415c276aca2f25cb69ba04a0b55ff8615d885b0f740a0ab1c12a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129663 Malicious code in qori-wajit10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac0cc3b061389bbe1f3dbce548ab3686b9859aad175c995f7f387335eb0237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66970853b1abf08a0a08c92d389a6d9621b7a9b54df46c30a6cfa58b1cd3b867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-saguer22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e71403f900136df49c2b8e5fda80404142817c2c95e955bee7670098d1ca413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101989

Malicious code in surya-kue73-riris npm...

Malicious code in xaver-martabak43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8706b7814b0d218a87730c96e6ee076d63b1182de1b6d82ce25f1f11dfa7d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97978

Malicious code in innocentwormz3n npm...

Malicious code in utomo-kue95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cc9a44ad249b2213f0eb2071072dbfc6fc8b598850643c428a7ac94fde12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-liwet70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f37abcda3e8dcf62f28c933e57f29781cba8e8935166fe0973ba929cf610d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-jengkol85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b858da1595a14afaa22ae584b49f90addd67b71f2a96106d47da3fc3a8059e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sate73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290351f8e0c63490c7684f1d65a89a36d424379a0223db97b42f00cc64cb5245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sate81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b398704d88b733d0190462f7ac3ef0dd952b47a9ac2cae00dfa1ff7c87ccf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-peyek8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c68db42a34565880cbd8f63799107892bb4cf1107d1c961adff9fb17d83f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104118

Malicious code in lisa-lapis33-riris npm...

Malicious code in stiff_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956e43b86bb0bc082355fc489d429748d8fdf56ac434b51f95f86663ee5abebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a51d0bfa615a74adf249c751a798baacc8e78948b30f50183d4c8af90e6edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...