MAL-2025-129333 Malicious code in patria-pecel77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0264fa96430fa6b8529b94c301b270f10bab459ee7315334267119df701a5cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129192 Malicious code in okta-sambalado1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84d6b7559854cd65967ee9f689999a6c4dd076047564319d2d0dc52d062ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125802 Malicious code in dewi-rawon15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033a1ab1cf6830dbef484529ac5a4941c75cf7cf4eb4d6217c2392834679dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129874 Malicious code in rina-brengkes32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778c50e1a3aa17ead1bae812f92a25f9e16b7974c505e7d077e70c3f209da85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128698 Malicious code in mulyono-ketan52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5b47e65f91ef8a31870fa99556f56e60eeeae251a326ac8a9d5f1a659e2d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eed336917d42dd9558a3da3f49396d7a67aa4c2a1cd9fa4348e6ab808cfc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742a9e4652b1e555ab8ddbddebaf2922984fcc3fd7c2d29068658b20b77b784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-keraktelor20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026caa0cd3500e35ebae8cd40845f62ab39bea9a3a4546ef526e716ee7ef381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lodeh46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3ac17b4f60ec2616d6787109850f0d245b40fcbd194a4c141c2312d26f3159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45394f32cb9ceb2de91337a50957a3c0d6d869d8c2406c356d0c552950a5fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98322

Malicious code in hanafi-bubur49-riris npm...

EUVD-2025-99806

Malicious code in dian-sate14-riris npm...

Malicious code in quiet_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b30d3a24f6e52c140289f203e5470b6145c83e295a66fccac95d2e98511c68d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rangi73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb59a358f6161506dfb0915deb4fdbc0befd1b07807d7b2de65a6e1fbbfa90f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128578 Malicious code in maya-getas31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96819ea7c0767b5257f259abd81062d278e46ad1f08658bdbd5e0b3461f2e8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126816 Malicious code in gita-gandul86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2950a622acefa11f563b79e7b370d5618caac7dadc06e264672e3856c74db04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129145 Malicious code in okta-gado-gado9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4c845418d6cb50407addf8b463bbd6eab8b7a1609dd61c1e948f236970b35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29c4bb131cdff5e6bef837002a35c4da51994352b59663cfec6798321c1482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101645

Malicious code in agus-kentang9-riris npm...

Malicious code in grubby_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6053dbe54a84f075933571a7428f6689417e8209cc07884198afd6fc54f31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...