MAL-2025-128798 Malicious code in nadia-tumis34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cb7623e1c74bb9446bec293a8ba6a6ac48831415928a2fb6ae26fe2ffd0f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129669 Malicious code in quick_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119323912f527c08e55bd6788107a12e68011d361be0801b8f32c2ec6056ecfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127166 Malicious code in hendra-bubur60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3867ca816e36ad1b5c267136fad99f41d866a5b8ba27b36bbda3c1d30f3610a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125846 Malicious code in dian-kue54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ab7310be83dcee037f66032dcb5fe973e10aa1d50fef8e4862fc83c2ac6188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbba07d998ab69ddc3505d406f056eaf5af784d3b73f89109417124125567dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gepuk30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f779daf165d75a352e5f7156a2dbe94019d7c11ec2baeb86630dba3c97f148c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129987 Malicious code in rudi-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd0d174b40e2d6a528e1130ea174237bad2d16fb19291d07cd54a1988ab6957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128907 Malicious code in nina-getuk12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae99d07120e93336f528386d100d2613de4937919a7276fc87c25cc51253d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getuk59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f5c781a040e49fa502a25f06cce088ab0510f03b7ff30ff8ec07dadad07689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97627

Malicious code in joko-tempe29-riris npm...

Malicious code in disastrous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d125065d76e1b0cecba808004e7d9848c616a003ce44e767c45b8a4299920435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a330b3541b1f257622058b7ffaf9e94373c03c4680af91b835588b5837648d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121336 Malicious code in kurnia-sroto16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b31f1a7aa50864af392c1d8512e069ef4cf4c7eaacafb22a9d830928b345331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119088 Malicious code in cici-mangut74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a1308471c63175199ae076e44b59c5bcbf34c0f6fd09d3432e95eea55ae4a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rujak74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd75e1b1ce9592956867ba2dba89616ce56f6df7cfd6b797b48f2e2c0cd3ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118738 Malicious code in angry_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79809a8a7e0bf2564ebb20edb12a69fc0358a942768fa8a90818dd721e2d496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121380 Malicious code in kurniawan-rendang64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa023b452d24ccc2f8caed131750634cf3ab0ba2155711be162b698251c331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lupis17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25a161c29ae201f7b0d5ef146856436ed4c68ef15678317c5fe7ef3d8cad752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244b20979aa8afe1e8eeaaf6601d5a73d6a8be90561f4e977caffe1682c8e8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120020 Malicious code in fauzi-rangginang53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5f24d4898f6a944693bd7a02dd9b9729504a986c16d3f784808b9dcd28f3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...