MAL-2025-135549 Malicious code in maya-tongseng29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fb7f5fcc1c7afe992e72fd810a803c45e46ee9e0801df0adf5a86f08009897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138414 Malicious code in zain-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1755f3a04bf14e1a8d1a6563b00ff4a089e7c6e13ef475272e314cb51e2e8e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138084 Malicious code in wise_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723e1e8b82821835ea36194fd25997c150a28f332eedc0d0c4cae299ab177684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132384 Malicious code in candra-ragi77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6c9ef6d186d37804414d9ecbcd69ab44a0aecbd6605ac920ae5c6f89a099e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135193 Malicious code in lina-rangginang65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4178533a515c5400089f3027ac4c93f55b610e4808f92eaf3f201fbec7e9ffe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132428 Malicious code in cici-kue39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dedc87dd40fdf52c612dd3b52f37f833c701a4e339bf1801aecc7028ff4789c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137445 Malicious code in tuti-ruwet53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b60e5e000098832cc617c7ed37ef56ddc797704e5b56f804ae2b3b4b2e8bd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135478 Malicious code in maman-sasag63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96c3c94a48ef6f8845215b76a43674c8a5d0f88158b8c3bf2fa764e700dedc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132302 Malicious code in broad_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da3464836d0f08edb69269558834a8a1e33e1c8a645053d9c79ca8770e02bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133518 Malicious code in fitri-klentik55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d060a3a1f004b1fcc2087bedf2cb198cf7e8afb71fff1e20bd3d54b1c60ccba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101923

Malicious code in tania-rawon24-riris npm...

Malicious code in qori-kripik73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcecdf2c0383962278e0a12ce2459cd5624d0f2e4b9ff2ad921aee956fdc956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bubur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c233a7ce44b4a6b93f3f81fd3babd45c9a4db4df150eeae92cbd18ebba915d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-lapis87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777ab2546a38620f5f5837379b4b2f7b92b6ab2d230ee720cda1319ee7e68fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129874 Malicious code in rina-brengkes32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778c50e1a3aa17ead1bae812f92a25f9e16b7974c505e7d077e70c3f209da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129333 Malicious code in patria-pecel77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0264fa96430fa6b8529b94c301b270f10bab459ee7315334267119df701a5cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eed336917d42dd9558a3da3f49396d7a67aa4c2a1cd9fa4348e6ab808cfc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742a9e4652b1e555ab8ddbddebaf2922984fcc3fd7c2d29068658b20b77b784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-keraktelor20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026caa0cd3500e35ebae8cd40845f62ab39bea9a3a4546ef526e716ee7ef381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lodeh46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3ac17b4f60ec2616d6787109850f0d245b40fcbd194a4c141c2312d26f3159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...