MAL-2025-135635 Malicious code in mulyono-oblok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248e29e57015e16f38d796ebe56bbce5006f5dc236dd7667c00e8312442aaea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5f0759d641db406890bf6dfdc2f44e211fb7696d8d842463879efd22f9c516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasisayur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f0afba7875fd9189e704bd3aaa34bd90e37acb508d8dcfa5980be36749d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbba07d998ab69ddc3505d406f056eaf5af784d3b73f89109417124125567dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ruwet21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63250df8a6c9838e32a0de971a71fff7485174329103961284b593c3b99c166c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6151d106617a16094b40c8709f00b8be375672b5ca39ea614c211d9926c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getuk59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f5c781a040e49fa502a25f06cce088ab0510f03b7ff30ff8ec07dadad07689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8427101e4940a45be0375d6631eae889240ecb8e9688e28d1d88933e4b00047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97627

Malicious code in joko-tempe29-riris npm...

Malicious code in irma-gepuk30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f779daf165d75a352e5f7156a2dbe94019d7c11ec2baeb86630dba3c97f148c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129987 Malicious code in rudi-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd0d174b40e2d6a528e1130ea174237bad2d16fb19291d07cd54a1988ab6957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129669 Malicious code in quick_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119323912f527c08e55bd6788107a12e68011d361be0801b8f32c2ec6056ecfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131257 Malicious code in wawan-nasicampur79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58225e46690990f6e64b5c924d2c5008d21fb795c96b3ba0aaafcf779e9c270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128907 Malicious code in nina-getuk12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae99d07120e93336f528386d100d2613de4937919a7276fc87c25cc51253d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131781 Malicious code in zaki-sambalado88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9212b329b7283740a174342c6ff76af3c0f157b9b51730524a1a9c79f6200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127166 Malicious code in hendra-bubur60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3867ca816e36ad1b5c267136fad99f41d866a5b8ba27b36bbda3c1d30f3610a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125846 Malicious code in dian-kue54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ab7310be83dcee037f66032dcb5fe973e10aa1d50fef8e4862fc83c2ac6188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128798 Malicious code in nadia-tumis34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cb7623e1c74bb9446bec293a8ba6a6ac48831415928a2fb6ae26fe2ffd0f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disastrous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d125065d76e1b0cecba808004e7d9848c616a003ce44e767c45b8a4299920435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rujak74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd75e1b1ce9592956867ba2dba89616ce56f6df7cfd6b797b48f2e2c0cd3ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...