MAL-2025-128290 Malicious code in lisa-lodeh46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c1d339274181f04fb224245ca3ae8728066f8ac262601e1f0910536294839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5038e53eb51d695627c84ee20c4c48940e1e53bcbef3d423786428b2971945f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130919 Malicious code in utomo-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d215964812e50b2784141b1fe81acb4bc3fb483ac2abe6b4e3553016af72431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130740 Malicious code in udin-klanting61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef26232b92723016888208fbf24c4ad785e982b1f0a9db68698e073a78e0b369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129778 Malicious code in riana-nasisayur23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56fb00ba280e771c3af1cce6cb4775d0a1894c6b4545a487ab4b6b7f69cef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130023 Malicious code in sari-gado-gado79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb450668ac788909eee1f30d10e119c36c40fd744c2980f8c6117e105416c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128896 Malicious code in net_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc9d5701866d13a808d6d3dfbcbe8b69f710970c16ffd40427b6260ab505f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124902 Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127317 Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in bambang-rojak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460ab2e87f2594ed3a19460a299458ca6fe1e3224a54f369831f1d2d925c41e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-tumis7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0206077ffeca8be6233df1dec84bea4db90fea4990ede243d9818ea9c35e2ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ketan11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753fabc1a9dc9d7297dded4d538892223cd2e8e5d73349d154072807e95b68fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakwan11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1071364a90f6a7537249eb30dd0b58bdf1ff1dce5bf2967c5843ab24aa939ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-taiwan34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6001ec856265037409a7a4a5a9db6730b94ec8794fa40ca0f660c6a1452460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-mieaceh35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52379bde86bad6476b7dfcf005241dd1dd038d65ffbbe8617ab3efd44c7f1d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-mangut12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2d7a2e95846efc63a53e27535bf691602cd12b828489e1dc31e154098512cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...