MAL-2025-126808 Malicious code in gita-bubur6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e43c3b870660365fa824d60d043638fa7c9b4212598dae4524c93f3d7b0311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124902 Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126455 Malicious code in fatal_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faecf300896808110c8bcda123d0689c538174ac824110814144e12a6ea56fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128549 Malicious code in managing_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0896f58f006be1f04d41595657fd0f99bd3f4942d924d085d3ad5c8ab370d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125943 Malicious code in dono-oblok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a3261e6ad7a596ddcf79e115bdda9634cdbd952b2084db3e700f434ecf07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128539 Malicious code in maman-sasag77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74839cc313edffc8fc10baf5154666a1dbf7e002ceab732bf42fbfaf223e9981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129848 Malicious code in rifqi-moci84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c15a93aa0702a8a1fa555932bb4b9b6a7bef0115ff4bf0e75074751f9df466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103221

Malicious code in okta-rangginang84-riris npm...

Malicious code in qori-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c599f49782be640571be3534ff1afc6014a98f45291b46f530ade81b9774de1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599692e6bb106f45cb2e2e333aa2cc989348f66eeb9288b3e0170564259cdc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127317 Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128610 Malicious code in maya-serabi70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b1400dd273ababc040b053b334e7ebc7f692419cc126ff0be5a3632113fcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131373 Malicious code in wicked_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e78ed7357934ffc0b7a2c37d9c483d85e4f6bac67bbb4b3f1c4eeb17df3da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125926 Malicious code in dono-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99552a3032aab82c481f3df98b4b8ebbbca4124000cfc784f7cb2333c2e17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129279 Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129219 Malicious code in oktafian-kue99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec46295b673cd432a9009349ecab86add55e49b0383a01f034422b40edf3ad29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128494 Malicious code in maman-gorengan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68307a69468bc1a8f6b3137e8ce834390518e57112e7d7feabeb34925b65c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c107a985e4c7fca8586ba98fecdd4589c7db003226b275c81bd9cedb22cfd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...