MAL-2025-130919 Malicious code in utomo-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d215964812e50b2784141b1fe81acb4bc3fb483ac2abe6b4e3553016af72431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126973 Malicious code in hadi-bika50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70724bf1808c0f20dcbbc406036e9e81baf92c9026b6932f5480d7b9ccb17fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126808 Malicious code in gita-bubur6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e43c3b870660365fa824d60d043638fa7c9b4212598dae4524c93f3d7b0311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sasag31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6757a478af8729799e4c07fd4e5f79e53322837faec762e0900dd5f873d3580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103873

Malicious code in maman-rangginang46-riris npm...

Malicious code in uncomfortable_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7319b4f716fec9dddca0266c1c54a357f2bf91207aec5c170f7565fd86b3de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sambel76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa52549f323d61305856dc0a24bf3a687d700a755d11106035fc288a8fe1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lengko86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16caf2b68e159fe820a089d2a968b7d5d849d8d964c73804fbc7c03c15afdd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c599f49782be640571be3534ff1afc6014a98f45291b46f530ade81b9774de1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5038e53eb51d695627c84ee20c4c48940e1e53bcbef3d423786428b2971945f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

Malicious code in tomi-takokak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a0aefc08198407b497466b8879df73fb96cd6076ffca2cd27ed8a7531911c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lepet93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe0c80a357d7373654af8cd133c9603cdc805deba20775d5912f54f4e67833b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c107a985e4c7fca8586ba98fecdd4589c7db003226b275c81bd9cedb22cfd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128867 Malicious code in nana-teh58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b022ac8b0217f920875a4b57e22ed4418450b21e760ef9089b5e8d1e831197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127317 Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126910 Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124902 Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128896 Malicious code in net_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc9d5701866d13a808d6d3dfbcbe8b69f710970c16ffd40427b6260ab505f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...