MAL-2025-125369 Malicious code in cici-lupis3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc5de3ed4ca02891b91c0f4ae752c7a655c994d73884d330a70e7861670c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125169 Malicious code in bella-lontong14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1cc00c503a45e592ce351d83ea06a920ef5ff4ce9fa141efecef8f46ece304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125100 Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128519 Malicious code in maman-lumpur33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aec5222a1291e594ed54031a5020656ff5ace68722804441342562577b654d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131380 Malicious code in willing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56baafcfba29d9cdef943ae53987c9910b95f158d177bc2c01a627421fab9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129052 Malicious code in ocha-oncom9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eb88657c41ca5ae14eb83a4dba02a0fec7dbf62b47a6a8501ac1746191f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126060 Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126760 Malicious code in gilang-lapis80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa6cef863ce0d3ebf7f6a399f300bcd97a00e7ff3363cb790ddf32e03db3aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131179 Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126455 Malicious code in fatal_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faecf300896808110c8bcda123d0689c538174ac824110814144e12a6ea56fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129767 Malicious code in riana-lodeh52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f6fd9445bf434e29b1468a7a79c760d46a57e854220d8b756be21b1d2ab789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-soto48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4374f62fb07f3db85f5b953adf7a74a27e81d00a43dd984c2a15b5ef8bc20f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97668

Malicious code in joko-ongol-ongol20-riris npm...

Malicious code in surya-sate73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290351f8e0c63490c7684f1d65a89a36d424379a0223db97b42f00cc64cb5245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sate81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b398704d88b733d0190462f7ac3ef0dd952b47a9ac2cae00dfa1ff7c87ccf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kripik12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66970853b1abf08a0a08c92d389a6d9621b7a9b54df46c30a6cfa58b1cd3b867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gandul43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d5693ae36863295a5c6bd1b23c64af330b845b821cfaa80dfcc98d0a9de633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125278 Malicious code in candra-esdoger81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7649c0e35f49f2c32fde9e00081d7d373500f376465e772e04e5b42daa090609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lengko25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a41b86c1e8a8cba45124106eeaff3cc8a6d8d7351a95ea7a4080abce36d89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...