Malicious code in nina-kupang25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b567e13eb8627d4f7558ff7529133e1d6c01d38027ee9c027c176676367dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99411

Malicious code in zaki-kepok44-riris npm...

EUVD-2025-98346

Malicious code in hadianto-lodeh41-riris npm...

EUVD-2025-99118

Malicious code in ethicaltoucanz3n npm...

Malicious code in sensitive_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2374c5be91b241f1dab7698b266b967ebd181716bdf4d1c520a2233d81ffd9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-wajit71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6742f2f4b3131eb83634739f4cd1432df43451471e3a1ef1ce4fedb48bbf1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-brongkos69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8215911c2aa25f433415cfad82bf23281168d96891a7f3bba3e5691b3230e620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-kue75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb4f0fb79587b1e0856eb8fc41ee63df8884184ecd2b1202791b95ccb82006a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-lontong22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e0a124ecdb7b919ea9b313563a8a59a2e6b8ab64fb9d11e26b5cb5d17eeed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129406 Malicious code in presidential_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b3f85b153bc1206c8fc01bc33f13b2f50f675a9652388fa6c99903b681fd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129418 Malicious code in prime_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65da541dfdbc52a6cefa04438b4144c5bb815bf7ba7e0941b3ed1b3291905db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131845 Malicious code in zul-rangginang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dcd7d0a5ae2153f23308f4ccbbc355f687799871d07e065d58c503d492f21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130802 Malicious code in umi-donat94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ecada6005210a720cea4716b528dc5bcd66cef9396bed8114645be2133cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tahu37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89935527d9ca6f2603f4c69b4285ad38e1fb7173412358b9d4784c7cfc7214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-papeda34-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a655d593e2c500a81fcb1e579dbb3d584ad5675aefa7c8a218bd297388bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-saguer94-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1199aee38e8ade60c445bb33212177340de47350cb1594b2dc9a7827288a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kemplang16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7700c5f9289b6f02663e3cb877a34ad5e553128795f6d3197219290037fad10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jamblang90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd6b69b8b01e87bcf7b25e41ccec845450897218bd2887f4e5109110e96abf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-getuk73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e8d2643064d80d0e6c2e0355a35bb39948370e83432e6b021bd14efaf539a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-pisang65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55584fa43f5eea7959d94291bd7529654f54c709261b2a06b73473c5f8928f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...