MAL-2025-126882 Malicious code in gita-nasipecel69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7c14899590719dae3b5c6a6e3e7fcca9a55af743905a9bea6184a9a41b7255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129902 Malicious code in rina-liwet39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b5845b0f5892e44ad5b6b8c81e31b55f6dc52448f64151388857b04fe7b3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131189 Malicious code in wati-peyek76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db441318bfd4c197e02e6128f9a19e44464838764775f161aadce1102cbe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128539 Malicious code in maman-sasag77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74839cc313edffc8fc10baf5154666a1dbf7e002ceab732bf42fbfaf223e9981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124902 Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130476 Malicious code in tania-oncom67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e98f3ca0daee5154b890d70caf76dae7ab4712c586d3c71086cd0feeaa11143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-dodol52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4470a81c86f34711e5a9970b921ca47a5d6b7634069b111976360cd9be9877a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125305 Malicious code in candra-rujaksoto76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cede7ac01402c01b081bd9000a58bb98a9bf3d23202861d7fd6716c8945e9732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fa6873d69c5040291be5646dd2d0e327de6f6bdf6b68b00acf23a785c7a84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94761

Malicious code in tastyleechz3n npm...

Malicious code in wooden_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d925a1ee81f1392cfa63913398fa46c09aba38d8ad11fd90cd54608926729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528766d853ffbeda2fabd68f9f19371a17a94437083647507bea45b21ab6e861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tek55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3e16464f978e346707c84c17e58cf4451b9013f0f8acf9d3423b3d89fc646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e220f2ce13c012edc769111d62f3f8aacc711a20c56c0cb9e7c112ec67d1b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-rujak2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a7a2aae0e0c8f3efb7d0f4b2b44c2b85f2feb7e4795570d87700aca778c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in tania-telurtahu80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93046a51d69445a00710978df37478f680975e17f3b44e2baa00ad36200bf36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lapis68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e480183be5ff44a1b0817d0623724090d2709f204c45b081b7d944c895389ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lontong48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f650864af5e4dc1d298e0f1d347a0a4452117e3d59c7c05fe41beb038d101a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...