MAL-2025-125943 Malicious code in dono-oblok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a3261e6ad7a596ddcf79e115bdda9634cdbd952b2084db3e700f434ecf07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127100 Malicious code in hanafi-kue28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcdcb929444aff1ccf801f7ad0c809a002045c64888cfccd68eae09ddbd88dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103221

Malicious code in okta-rangginang84-riris npm...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cc9a44ad249b2213f0eb2071072dbfc6fc8b598850643c428a7ac94fde12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf98848e19e3125a1fd502e5784ff027ac410484cce255861dbc6a82f675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a51d0bfa615a74adf249c751a798baacc8e78948b30f50183d4c8af90e6edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tempe82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aec9dbb61209a7582365d8050236c16327b2c5c17f6b221e7f23fc9ce7a4534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101989

Malicious code in surya-kue73-riris npm...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125926 Malicious code in dono-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99552a3032aab82c481f3df98b4b8ebbbca4124000cfc784f7cb2333c2e17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126060 Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130919 Malicious code in utomo-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d215964812e50b2784141b1fe81acb4bc3fb483ac2abe6b4e3553016af72431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126973 Malicious code in hadi-bika50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70724bf1808c0f20dcbbc406036e9e81baf92c9026b6932f5480d7b9ccb17fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130857 Malicious code in unexpected_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7873c3dd3a8b696a61d8198715dc50a55692466e53ff21a6f9c13fd11d60b0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131373 Malicious code in wicked_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e78ed7357934ffc0b7a2c37d9c483d85e4f6bac67bbb4b3f1c4eeb17df3da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126808 Malicious code in gita-bubur6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e43c3b870660365fa824d60d043638fa7c9b4212598dae4524c93f3d7b0311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126455 Malicious code in fatal_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faecf300896808110c8bcda123d0689c538174ac824110814144e12a6ea56fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125100 Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...