MAL-2025-92845 Malicious code in zain-tempe53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cef7ac7af3b9328ce285334961fa578ae5322a71ba99575e8e3931b41cce183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86075 Malicious code in gita-tongseng65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c267759dfb00e086935bbaebab6b4384c31d7cb763f9a225a66096778b2a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90113 Malicious code in rifqi-rujak21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410d72fde9b0ea93c17ef2b3d04ce6fc8488cd4f2da265caeac352a9633c5619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83008 Malicious code in agus-bika61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687fb6cd159a025ec0e08c39dcbba8c6d3c63a4b0e7f7af64d02bbf6c6af45dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86661 Malicious code in indah-martabak3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a0ec7ea65e3ce7d66810fc1cdbc3857fab7208bdc7e181bafb4fe729350a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86429 Malicious code in hendra-rendang87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b553bf283a479f11daf625e98a620189901a2f4c44a74a160c0d1a66d63de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85171 Malicious code in erwin-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d7f39ada4f7a8c5f6fa6cb38f70f052575c486b9ccbc305e41a11f0f43997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83995 Malicious code in cindy-esdoger35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ba3ab6c55b57e8848427ac35240ed0a9335f97063b733c7234e2fd80ce9f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86045 Malicious code in gita-semur12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a67b9661c8176780628fb828534490ec30f5bd69d3624b737fd9be322075598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84653 Malicious code in dian-takokak47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6de654e1b0c8a9ad30727ad6e0e5732b94a0ac671a68f59a1466929e9e1df7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89430 Malicious code in patria-nasipecel42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fff04fc7ee4a612af01db5f49939b2b1ebd5edc3f6bd864f8b56e5270de35ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85227 Malicious code in erwin-rojak55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741a4ed49ed9d3f505043e451cc06ba11435aec010057b615192e83394f4b9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65550

Malicious code in vera-lapis50-riris npm...

Malicious code in bayu-rojak98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e018fedb735bea4d668a7935965cef6c81fa747962c5cac99186e6d00f44e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83834 Malicious code in candra-otak-otak23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8645afbd960c77815cfdd2d80ea44e563f708b57c47ebc41ce9798e9916777cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89009 Malicious code in ocha-naget79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857cc5513fb06381036ae9aa09a13c5ad834dabece2f6ec5a0dd601379f88e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88048 Malicious code in lutfi-lodeh53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f4685d76f8cbdac79edbe493f6b61a0211cae0edf36cf7ebe5be54a8b35d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91751 Malicious code in vera-tumis71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fb9a3896b111cc29f2799df74bdcef837adbcad5cd14dcc3e71e28cabba461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82878 Malicious code in ade-jamblang46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16f9cd6b647657f7678e6b8f9edcc984f88117437c99e0a7c7dfc8d2df40c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87419 Malicious code in kresna-kripik20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7076e2a61c21dda0d132b72de8bdb5741c48b516e87055c2465d6a967902fa17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...