MAL-2025-130971 Malicious code in vera-gudeg96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2285a5b9f39fe6267dda5d4df271894f66b48e0103fa7610e0f7296675e5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131112 Malicious code in vina-takokak72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929006acf7a0cbb586a12f21e79cc8e382167178da920b5560b6757922a3df1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130869 Malicious code in unnecessary_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347e6e8f0465b635f9d8ed5f3a3243e2a99d428a0a0d18cfc84c6499baffb5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126974 Malicious code in hadi-botok45-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d704540a6b3c8a08d7d8cfcb5e8e086e356b7efeb42e0aecafd66f4f597f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129145 Malicious code in okta-gado-gado9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4c845418d6cb50407addf8b463bbd6eab8b7a1609dd61c1e948f236970b35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130305 Malicious code in spontaneous_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30930cd9661724dc9890655353b0d3bbf893154b741ff793389e15385904b068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127229 Malicious code in holy_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a67a6f26c68f0347e1732b38893c2474c68da5c770f0213364a4450218d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99806

Malicious code in dian-sate14-riris npm...

Malicious code in qori-kripik73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcecdf2c0383962278e0a12ce2459cd5624d0f2e4b9ff2ad921aee956fdc956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125645 Malicious code in crucial_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab275d18226726ca7f182150882f32f8216b182d5ae2c1cd0bc1bdde9051d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125179 Malicious code in bella-otak-otak13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5cb76ab452719d15fcccdc1d53c4efd9eeee5d1d22b284bb891df12b342dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101923

Malicious code in tania-rawon24-riris npm...

Malicious code in grubby_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6053dbe54a84f075933571a7428f6689417e8209cc07884198afd6fc54f31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98322

Malicious code in hanafi-bubur49-riris npm...

Malicious code in wawan-kepok38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fde5b564e0dbe2c9dc1259fe9e0ee8bd2c5dada933aef71d9a19081883aca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128932 Malicious code in nina-serimuka3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00caafc002a5c8847cb3259b358702bfc9e4875261a50b77c6a14f03a344a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126650 Malicious code in fun_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e7d72d02588fe513493098e7be89e9eeb788b60794d8fb4b78fe9352e1ac75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128810 Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125972 Malicious code in drab_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980ab3f037ab15b5e232da11fb43195cdd1f7766b41e97858bb5e4eb4ddc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129333 Malicious code in patria-pecel77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0264fa96430fa6b8529b94c301b270f10bab459ee7315334267119df701a5cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...