MAL-2025-128841 Malicious code in nana-mendoan31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fd2ae1228f34faf3a92895889e99e03971d076a649c89c5bbd2c1542d7b8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130988 Malicious code in vera-rendang4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b838afa185d85de018afa57572c686d9668fd521510994992dad3da7f448474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131179 Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130436 Malicious code in suspicious_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192ffe135c5a9bf8478e31b6a130ca2fb072d47269718dbd2771d95b78fd540b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lengko86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16caf2b68e159fe820a089d2a968b7d5d849d8d964c73804fbc7c03c15afdd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sate39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f364d8bca9c7d147f37e7406e3ee6b145b1f96230b1189f839d1318b27683aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-nasicampur24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2048b21c72e39050bba19d21a1d892bacb86fcb0dba9ee649576e32d8efa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-klentik70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd19b9c49146d566fcb53296f3fb24acd066adaec7720d7490879d9f346b7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasi22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb4d9dea809317ad21da20156dc2a3863a3f3f48b393cbacc4c49a7205301f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98501

Malicious code in gita-sate32-riris npm...

Malicious code in sinta-lengko25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a41b86c1e8a8cba45124106eeaff3cc8a6d8d7351a95ea7a4080abce36d89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-klentik97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc0c4898a509db490df455c6437d49e37bfee577d3d58d259e4c75fed9ca3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1eea017544062ef65e7fd48fc2dd9c7c8c379bc64114dca894604974942a19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce9027182dfccd9fa774abce0864507cc82286dec536c591f059fbe48297237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-soto38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4872ebd7c64ab32e48bb4482b34985c777ff27023cce1797b44c52988b5b357a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-dodol52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4470a81c86f34711e5a9970b921ca47a5d6b7634069b111976360cd9be9877a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ongol-ongol92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ae9510d613bf13c85f6217b090d1f32dd9951f4126586ac45ad02853fac661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-takokak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a0aefc08198407b497466b8879df73fb96cd6076ffca2cd27ed8a7531911c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sasag31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6757a478af8729799e4c07fd4e5f79e53322837faec762e0900dd5f873d3580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...