Malicious code in alleged_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d47a7c03b719d0fb8467589af2a62bdf378d0033a92c24392ee922bb5343a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79190da381c597f4124c7a2367093fa8add2efda0ccc8023ea7347690105413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kepok20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9674d2e9b81968dd5c4cfe240934b21276ca461acbdc2e9ed96fb959b31907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786878b33f81483c66b40223a7502280b2b66eeba481360433900c0f9d1f6a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-soto48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4374f62fb07f3db85f5b953adf7a74a27e81d00a43dd984c2a15b5ef8bc20f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128991 Malicious code in nurul-pisang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0749caec4908dd1a07a03ac282c0c925bea3dd5514801e4b329995b3584b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130436 Malicious code in suspicious_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192ffe135c5a9bf8478e31b6a130ca2fb072d47269718dbd2771d95b78fd540b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130457 Malicious code in tania-kacang45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a95269a3ef6707565d318b7f56f3f2d93644e4737aad7d2f3115490948c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129576 Malicious code in putri-nasi65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583598dd1e730c98612624d710a45bda5527bcbad2e2e097793558d5234b9f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126772 Malicious code in gilang-rangi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0579f9768b3e573b3b8753c9931013176c3ad28c103e3c876b81af35e343f9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514e6d4a29e5dffece18f2253291478f7e3926a2cf9aca8f038299cda1a0c0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99216

Malicious code in erick-martabak31-riris npm...

Malicious code in zain-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf98848e19e3125a1fd502e5784ff027ac410484cce255861dbc6a82f675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gandul43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d5693ae36863295a5c6bd1b23c64af330b845b821cfaa80dfcc98d0a9de633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528262d79ddbc84cdfb1650c1f50cefea655e9d46ec69729155781e5f1e3ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-dodol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacad7a1a9361bc681bae2102b2bd8a3798c8f4ffd08965f618d16f927032f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102659

Malicious code in retailwhippetz3n npm...

MAL-2025-130165 Malicious code in sinta-lupis89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa8fa576e4c8ba00a7b60ecf46aeb8a275055dc58fb60252826e417da97a82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...