MAL-2025-130784 Malicious code in udin-telurtahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3694805d1d7a04f644e0dfc8d84c561de786af9f1677fb84ca9fc99b6a0372c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126455 Malicious code in fatal_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faecf300896808110c8bcda123d0689c538174ac824110814144e12a6ea56fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129219 Malicious code in oktafian-kue99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec46295b673cd432a9009349ecab86add55e49b0383a01f034422b40edf3ad29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a51d0bfa615a74adf249c751a798baacc8e78948b30f50183d4c8af90e6edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128494 Malicious code in maman-gorengan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68307a69468bc1a8f6b3137e8ce834390518e57112e7d7feabeb34925b65c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130857 Malicious code in unexpected_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7873c3dd3a8b696a61d8198715dc50a55692466e53ff21a6f9c13fd11d60b0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c107a985e4c7fca8586ba98fecdd4589c7db003226b275c81bd9cedb22cfd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f469bf8339b28e8e94361f2a30ec1a9ab233d6305e3aa22fe9d318ec5431dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-semur37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a433f268651a41b71c65626ee1f5a4314c7657acf5972c846468b075aa4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126910 Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lengko86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16caf2b68e159fe820a089d2a968b7d5d849d8d964c73804fbc7c03c15afdd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130330 Malicious code in steep_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e0355f1175dc1140ecd6bc5133f4496c21dae7e96f628dd1ac588f6b68e0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126060 Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126973 Malicious code in hadi-bika50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70724bf1808c0f20dcbbc406036e9e81baf92c9026b6932f5480d7b9ccb17fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

Malicious code in cici-sasag31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6757a478af8729799e4c07fd4e5f79e53322837faec762e0900dd5f873d3580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131373 Malicious code in wicked_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e78ed7357934ffc0b7a2c37d9c483d85e4f6bac67bbb4b3f1c4eeb17df3da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128539 Malicious code in maman-sasag77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74839cc313edffc8fc10baf5154666a1dbf7e002ceab732bf42fbfaf223e9981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...