MAL-2025-128043 Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128813 Malicious code in nana-enting58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a21b48dce0d36dd8f8c0c228e9f52528fa062e8d4fd54eb67a67dc189eee241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129902 Malicious code in rina-liwet39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b5845b0f5892e44ad5b6b8c81e31b55f6dc52448f64151388857b04fe7b3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131655 Malicious code in yuni-lepet52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f89f70cec9a40c3f51ebc7c80ad6402dd8af74752d23d57bcc6f58837f83a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131189 Malicious code in wati-peyek76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db441318bfd4c197e02e6128f9a19e44464838764775f161aadce1102cbe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126882 Malicious code in gita-nasipecel69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7c14899590719dae3b5c6a6e3e7fcca9a55af743905a9bea6184a9a41b7255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130214 Malicious code in siska-kue27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe088ea9babadcf8e5a93dea9596ae01333629e502ffa3eabde06702997983cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127317 Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128876 Malicious code in natural_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86da960d24028abd67be5f6d665de4ae8344c5bfac86f1df42a3f210c5cbbb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125185 Malicious code in bella-sate74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0911318a88b0f681fa46bf8fefa30705bd95be1c9f29065859ba5bddebe888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2a33955fd57ae9dd96ef3b5b4690c7e357db421a64b5d7bde6392894a34662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-tek88-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bb05f3e8db027a77d05decd2d1ba9027688c0dd8e9763abf603d6f8aa4fa49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94761

Malicious code in tastyleechz3n npm...

Malicious code in strategic_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501f14806a94fce4f5e3f96c7294e7c81e46b5136cb22a9f406e94842db319d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mangga41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01940624220766fbc3a932e6659b0116dc599319ce2764364c5accb3936675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gepuk93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b94ad983810c9cff80a809ab4b30e310e7521dd22c3a2f156d04611c60e1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tapai35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e8cd26a39df191bd4af3e80d4831c5d1d1751046d807651a0537eac533b401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lontong48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f650864af5e4dc1d298e0f1d347a0a4452117e3d59c7c05fe41beb038d101a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-serabi7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef7fbdce46f496794bad83759747275c475b82c755a4693e9eb372113e7207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d925a1ee81f1392cfa63913398fa46c09aba38d8ad11fd90cd54608926729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...