EUVD-2025-101989

Malicious code in surya-kue73-riris npm...

Malicious code in surya-dodol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacad7a1a9361bc681bae2102b2bd8a3798c8f4ffd08965f618d16f927032f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-martabak43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8706b7814b0d218a87730c96e6ee076d63b1182de1b6d82ce25f1f11dfa7d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97978

Malicious code in innocentwormz3n npm...

Malicious code in utomo-kue95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cc9a44ad249b2213f0eb2071072dbfc6fc8b598850643c428a7ac94fde12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-liwet70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f37abcda3e8dcf62f28c933e57f29781cba8e8935166fe0973ba929cf610d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-jengkol85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b858da1595a14afaa22ae584b49f90addd67b71f2a96106d47da3fc3a8059e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97668

Malicious code in joko-ongol-ongol20-riris npm...

Malicious code in surya-sate73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290351f8e0c63490c7684f1d65a89a36d424379a0223db97b42f00cc64cb5245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sate81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b398704d88b733d0190462f7ac3ef0dd952b47a9ac2cae00dfa1ff7c87ccf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-peyek8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c68db42a34565880cbd8f63799107892bb4cf1107d1c961adff9fb17d83f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102659

Malicious code in retailwhippetz3n npm...

EUVD-2025-103221

Malicious code in okta-rangginang84-riris npm...

Malicious code in kurniawan-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786878b33f81483c66b40223a7502280b2b66eeba481360433900c0f9d1f6a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5914fe16785d75fc0eeb7dbb1b467fcd186a66c9f269a116640d954c2051b0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-getas35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85eece0e6528e1ecba32c62bcf6fd3e6f97536bb5efd3dd36429820facd6aa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-otak-otak68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed093bc7e1938ecfb1fced29e1a3d38f7a52a3d011793dab7fcd3d0dcf4337b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf98848e19e3125a1fd502e5784ff027ac410484cce255861dbc6a82f675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gandul43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d5693ae36863295a5c6bd1b23c64af330b845b821cfaa80dfcc98d0a9de633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...