MAL-2025-129180 Malicious code in okta-nasicampur41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86cabf7082507a4730eb0c09dd3bed0c3c0eb0d4d2ef3d14be12b10922252893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100586

Malicious code in wati-sego69-riris npm...

EUVD-2025-101168

Malicious code in utomo-gorengan28-riris npm...

MAL-2025-129121 Malicious code in ogi-soto1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f3a4aede5a732437501c9a8a41bb4fcd68f3d8120a920cb06a007842d0380f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125749 Malicious code in dewanto-tomat40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c00bc0d2e9b8bf6be498c2e7c2ca2a9e5cb3337a9d685df20d8b2666cddf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126248 Malicious code in erwin-kripik72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a81c3552a407c208fabe87a0ea6a5d00c8c3caf65a7471cb19282f905b74e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125160 Malicious code in bella-klipo78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5398c6f437106e268765424764d88c6147e2736211bec138575589e9f9b417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131156 Malicious code in wati-dradag98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224d4a34219532634cf1a6b7dc6e4893e1a980d31a099f5588fbe5ba91f9f59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130235 Malicious code in siska-pisang65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55584fa43f5eea7959d94291bd7529654f54c709261b2a06b73473c5f8928f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131856 Malicious code in zul-teh32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a808da90a4f4493ef8b292550eb7f4c61e78518a054480813ba94c2421bda12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126464 Malicious code in fauzi-enting37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942faafb42e432d7372d1331b4bbe17f3a777ccd0a62d2b59a183de530e5ad6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126911 Malicious code in gita-tahutek21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d58762e84c6fdeb5dcf037e19b588ced6bec2ddd982df2529f06ec7d28a415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129150 Malicious code in okta-gudeg72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8560959e5d8d6ee4a4e592bd5b79c4a4b2624e42b02ce3368d1145be6862b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128373 Malicious code in lutfi-kue27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d9380d2c0f2ed7a7001defb13e0663cdf5bd3d173333843b896ef4e99c3a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127606 Malicious code in jaja-mangut36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe25237454d7945d546e6e1a6356a26b21b41789f173e5434a78d5a99cf657f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130729 Malicious code in udin-bubursumsum39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1297096f575bf504cd4bd161839abdd6ea5a18b347a2ba3d49fce7fe0904ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128790 Malicious code in nadia-saguer2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd4a45f2d8b928aebed9ef90d4cb916b574b87d48cd4a14d17e4be452c8b376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101718

Malicious code in tomi-gaplek17-riris npm...

MAL-2025-127959 Malicious code in kresna-lodeh20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95364dfc00eba7238c5d5564b4b9acda3e450062fd2de2345fdbd060061da8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129332 Malicious code in patria-papeda31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1c63cd33780dff1ec780bf984bc2088eb7d14fc14d5e4b5aaeaf0a9a98251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...