MAL-2025-130982 Malicious code in vera-nasi28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62677120e04ea7cec6576c2d9c49a566e8088fa4c3d79df6ad35b8b3b8d8a6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e842199bde2d9419979798c9901783385311bb855052c737b1924d5f7fc7835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131838 Malicious code in zul-nasiuduk58-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9400fd5e19283e1d12c8ee2b5b7dc082b644d55b9edd6e22fe8de496991e4909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125749 Malicious code in dewanto-tomat40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c00bc0d2e9b8bf6be498c2e7c2ca2a9e5cb3337a9d685df20d8b2666cddf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98501

Malicious code in gita-sate32-riris npm...

Malicious code in sinta-lengko25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a41b86c1e8a8cba45124106eeaff3cc8a6d8d7351a95ea7a4080abce36d89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42168aedfd6a4afce17017f6bd6085805b9ad0b038854d479a1870600d3f8764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kue8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01a1280b9a34c2e09e65e414fa11c6cff3c6fdfafa9d47b1931e968b658cd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed97acea2d1b21fa3dfbab1969a5e1a87fe827ce775a52b66852f0396a2c6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129277 Malicious code in organisational_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5f81d16f6e624f7e5aaa0324ad96acf9352799c96a097c51787985da462483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130409 Malicious code in surya-keripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a5cf45b88c330331d5a6c6fd63b4090993cf9f4a8258f1e10ff9debf0bdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kepok56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1152cc730f9fa2ad609966eddec284ba6c175de0b0efe089460b38fb007e8b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f27efafa70b8b8f550c4cb6eebf16568d8289370c785b0be886ff1459206ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-lapis99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ac40299a24623fd6a6dea4fb77ffceae436b419592224b3432ffa5c4f9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101727

Malicious code in ade-serabi41-riris npm...

MAL-2025-125185 Malicious code in bella-sate74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0911318a88b0f681fa46bf8fefa30705bd95be1c9f29065859ba5bddebe888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131231 Malicious code in wawan-kepok44-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8235943c65f0464ba4ac786df5f3841d7858144e29e54dcf6445e017c72fae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125790 Malicious code in dewi-nasipecel96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a8bd9caf0f88e287854f816004b859d995cd098f90a286449e04eca2d75b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94761

Malicious code in tastyleechz3n npm...

Malicious code in wati-lapis68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e480183be5ff44a1b0817d0623724090d2709f204c45b081b7d944c895389ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...