MAL-2025-88975 Malicious code in ocha-empal25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89d10a2d2bde627eff86501e6cc28e8c95b5a7f874af2f3b8803ce0fa85db37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67577

Malicious code in putri-kue39-riris npm...

EUVD-2025-65572

Malicious code in vera-gembus92-riris npm...

EUVD-2025-67157

Malicious code in rifqi-martabak55-riris npm...

MAL-2025-92797 Malicious code in zain-lapis72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbc95064cd7f021688f61ef14da10609d5f03ad2c6c6737f4b25808a22d7c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67504

Malicious code in putri-pecel5-riris npm...

EUVD-2025-65620

Malicious code in utomo-sambalado20-riris npm...

EUVD-2025-61796

Malicious code in wibowo-rangi73-riris npm...

Malicious code in gita-lupis13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a51aea898d9d4e106b6a8ecac1b7e3c7d08741a7acf2d02056300b3b4ef7d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91856 Malicious code in vida-tek46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b595414fa1e19eb16f504941af1b33dbbd94a44a35b0a7d887da2794bf83cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61342

Malicious code in yuni-martabak46-riris npm...

EUVD-2025-67011

Malicious code in rudi-bika42-riris npm...

MAL-2025-85906 Malicious code in gita-bakwan43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46ba9a544f9b9622fe28cab7edf70d7c030ace7cbcafa0809e775949123348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92473 Malicious code in yanti-jamblang82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65edb486b8c500e68b9605faddd5a6e5e51ab71460131e3705fc7a92b526c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89193 Malicious code in okta-nasipecel62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6789ca448ae2712c5562c99093239bc6da907e0f88f57b443ca320090afbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61919

Malicious code in wawan-nasicampur73-riris npm...

Malicious code in lisa-gaplek51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1634cf4af8dcf3741fac21d1f40d02ea8dc5748ed72253bc74c8b6894e6c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-asinan37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb4af86d7bbf3808c89f5ea6645a5843e340ea12d002e227cd767fa388822ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-pecel45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda9b7d68f2913cb40331da74e219a7817052162f719bd33e17c1e6c4b7ba258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-donat33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c94f1e6bdcc0ebaea8f661cca3ae4f6eccfa9e07a03b8ad8911f1ff1ee39b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...