Malicious code in putri-lontong86-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64bc5b7e051f6f150b5e0c1e46e6174a4f8fd56a8b3024a1c17fa9c6f85e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tempe81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46184023153019b4fb86936e0380b80e95b1faa011ad6557804ff3e2d2bc60e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed97acea2d1b21fa3dfbab1969a5e1a87fe827ce775a52b66852f0396a2c6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98818

Malicious code in fitri-miebogor65-riris npm...

Malicious code in vina-empal7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac81920fdc7df867b7388c398dfdff059f80b12192bb7943817113c61864dba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sambalado26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2658f2576b415c276aca2f25cb69ba04a0b55ff8615d885b0f740a0ab1c12a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-soto76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110bf14dc3f99f04575786a7aa6047ea082554dec77899b66919044b497a80fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-telurtahu58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28361b0ccca599058adf50404e86ee112860a0840593a2ea307333f0c1b00f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102362

Malicious code in sari-miebogor53-riris npm...

Malicious code in iwan-empal91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b8debded1ed21d179c3990f47123d593ac7836cccb1a8bdcc9d6d8e4d3d209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kemplang70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2fd476c4ada6cbf8f1b22f7f44d6cb78f31b1651a8794d43baf1e18e59eba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e842199bde2d9419979798c9901783385311bb855052c737b1924d5f7fc7835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-klentik44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc16b9cff74a727201364010f24e4229b312863aafc9bd9aa08cc950a3c8dc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lumpur32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852b867e1698f989213cf4a8fdef2dcbacf7d310506584746d084c4a24615df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129277 Malicious code in organisational_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5f81d16f6e624f7e5aaa0324ad96acf9352799c96a097c51787985da462483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125206 Malicious code in bizarre_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fe4980a582b7b87dab15a55043b92884db1de996cd3aa2b0a2ed8af890c23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124921 Malicious code in allied_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d73e21d20bc54cc70b8b5d58d3d462f8bf3e8104444b78369bc0d81f5914bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128284 Malicious code in lisa-kue60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82cd6578b9fec8caf84bac27a7b10b82a6068b2cdc09ee41230660140e3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129279 Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...