EUVD-2025-99880

Malicious code in dewi-rojak3-riris npm...

Malicious code in accused_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599692e6bb106f45cb2e2e333aa2cc989348f66eeb9288b3e0170564259cdc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97910

Malicious code in irma-rujaksoto80-riris npm...

Malicious code in slimy_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f469bf8339b28e8e94361f2a30ec1a9ab233d6305e3aa22fe9d318ec5431dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f316a1bf001c87a228b73e6bd8e02ce7c56b99a951d60234552eee9c84e688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bika42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be669a90fb1d77b7021f8d2515cf471258966d1f2cf36190b76a519a1b283efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-semur37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a433f268651a41b71c65626ee1f5a4314c7657acf5972c846468b075aa4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127525 Malicious code in iwan-keripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ec6ae51ce5062d50f41c6dc6607ef18e05fcf0e7d9b7bf3bb9bd871251efb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128290 Malicious code in lisa-lodeh46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c1d339274181f04fb224245ca3ae8728066f8ac262601e1f0910536294839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130784 Malicious code in udin-telurtahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3694805d1d7a04f644e0dfc8d84c561de786af9f1677fb84ca9fc99b6a0372c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130740 Malicious code in udin-klanting61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef26232b92723016888208fbf24c4ad785e982b1f0a9db68698e073a78e0b369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127100 Malicious code in hanafi-kue28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcdcb929444aff1ccf801f7ad0c809a002045c64888cfccd68eae09ddbd88dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129778 Malicious code in riana-nasisayur23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56fb00ba280e771c3af1cce6cb4775d0a1894c6b4545a487ab4b6b7f69cef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131750 Malicious code in zaki-gudeg4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0917a99ffd2aa898d347e4cf4c4d1bc24de325f5da84a3f5d2a49a935dc88101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128565 Malicious code in mass_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1920939a51a59f851314cc17fae44bb9baac67b1555f6afa7a0543d45c21ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kacang42-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7ab379f3a0be0898bae5f9a5ba828720fffa35dd4091be2b8048fa5d041f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-empal45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb22b138cd4df958a43233f0dac4b36508fc71c96b583d30ec98b2f7dd9920f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130023 Malicious code in sari-gado-gado79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb450668ac788909eee1f30d10e119c36c40fd744c2980f8c6117e105416c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...