Malicious code in mulyono-tumis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-semur74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe9bda01adbabcbc34d2d116b5c7065518c2962828821a0bb50493047f9df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-klipo41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f1ef41f265c36bbc3fc88f6addeb5d909788135f33f213d2f0bb0b82a38410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kripik18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f10930543838d6c6c91489f6077e636294e7660bf67530cd64b3e907aada2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103547

Malicious code in nana-ronde18-riris npm...

MAL-2025-128631 Malicious code in mechanical_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0935160e98d0d2a801df58e18166ab89c13720937426b49b5f632558b5da3440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129672 Malicious code in quickest_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916aef1488c325d01187d07a66fd69636ded99cccf9fdb61c798fb8ae97b976e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130838 Malicious code in umi-sambel5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84365d2a9653573a6889d96255aa7387c33629b723b9d91c4ae2a45d5f1ca9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-ketan16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8b47de0c5a5ad40e2f8d210af3684956953b23604b335f1e46d810bc477fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7ae1d3604e6f2893fc6730ab9a7c06effa92540c08cc1e4129d3788398bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-serabi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee681e96c58c2f4dd4ddafa7370dc3b2e90372837f6457880e68c434135242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lumpur98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8ac81a9116616921b688c9cb873130ed062c9281d659c91df12075e183066c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123319 Malicious code in slight_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0f8761c3788c84b04475c580efdc66ab03b6229164280a8bca7d88a15f6e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b8ed44ea51ae78e87f83b530d9a460f357f4848278118176d5b5c8d56f843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106508

Malicious code in attractivekoalaz3n npm...

Malicious code in fast_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6367798c8780647fa3e6694ffcf9d3c89815d823ed0fbef2db6abd61d8c48d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119922 Malicious code in fadhil-tongseng80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4d5abeb7abc7e990c307f259b685d5d94e6ba0255f753a3d5794f0443a0909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-keraktelor11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f058e3f6c4b5f3ee448dbe7093d5629d3de45709aab848360d8cc821c05dffcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tongseng6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3584b3f649c0d6b5cbc4c79d814590bd3c4a1ffded7f7c0fc115283810d6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10005ea196af514d346fc6b00614c19cb9b7780f04c7c63f029abd47e247b174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...