MAL-2025-127878 Malicious code in kiki-kacang32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11369054af0a301726582523632e06839a1b0910a13fa72ba42098bac43dfbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130036 Malicious code in sari-kue24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f63c093eef42e1ccda440242cdb936dd574da6557427d1fcd43d4aee6d52294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131219 Malicious code in wawan-empal17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd285f7c8ff1dec6c53ee3a8e16c3fcd2c6c1799e9b99c4e950123af3390562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131164 Malicious code in wati-kacang75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818234abb5f23e83738df41e8cdf8aec55b312ac120244fcbd2d9f0ca724fc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126207 Malicious code in erick-pecel26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8db0cc9cf0ba23e982058218538e38e8b15cfeae59c5e2438ddf262d4295e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125866 Malicious code in dian-rujak12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2676d3f3e5749247e467b1685d06663dddd6091d1d043ea3880912c7c337f401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126880 Malicious code in gita-nasi40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93a4f1a36d4d5faa700b5bce69b618341ff3fdcf452dd556729fc947f1ef061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126828 Malicious code in gita-jengkol70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5eefb51816937f18d57d2411568782e9144ccc5bccc7f18acdb70ee1319f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124840 Malicious code in ade-tempe94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f46091205bd0ad1e5e26e6b48723d9c90e2853a5748a53858e5c53e3fee265d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126792 Malicious code in gilang-tahu22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6328d2cf1fd7f5550ab1a098020d6885f2be3e542134de0d7822202a6ee6cc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125142 Malicious code in bayu-soto89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c0bc315a6b897c25dc59dbc669779e66eca4dd0a20fd086b0a976438b1b638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125103 Malicious code in bayu-botok21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b08b8b1979a14b6d45f965fdff08f548d8822081f715f1b4f339ee7d001029e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126901 Malicious code in gita-sate32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957e100ea218fa86ea96d9aea5ac811dd1f5506b1f7673db01b64ec17f77c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98227

Malicious code in hendra-kentang74-riris npm...

MAL-2025-125141 Malicious code in bayu-serimuka7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563ec812ffbb37668e056f7e5de47e3ba3d38fed064ff6bb0966e759ccfcb09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126480 Malicious code in fauzi-kue30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0630c10f76993a656a40c8a0e961d353192d9f064c104da0f7ec8156df7d5805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126593 Malicious code in fitri-peyek30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70364d2192b1c1b24b545dbe1e3ce46bb7009c1ea7618eaa678625cc2b018a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125087 Malicious code in bambang-sambalado9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13b256032d551cd194d11881ed6b824283ca1124e3e30c00e7c91f6119f4a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126972 Malicious code in hadi-bakso24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0794c2ba85e67931f85429c54bd0a583b1967638d67423d55212f195d9ef2987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126700 Malicious code in galih-rangginang73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d90a33e5b0e9102ec3eabd50d3d2ff516a23ec6f8f3842cfd68d4dd87166e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...