MAL-2025-134983 Malicious code in kurnia-ubi60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300634a424d576887fdc8b3a032542c5747c834edf794150301865f0e0e135d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-teh57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bde93bdc45c54011ffb907865de1f7884db47cafef2c50480f3638035697d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133920 Malicious code in growing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c73c4ffb30824591444c91fa2c25e3122e493fd4f99eaac3997d3bbaf14561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138035 Malicious code in wibowo-kacang62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc72e37079a27792eb6a3831bc8eac74cfa2a64bf2ced7af7fc1fba45c49f95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-semur37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a433f268651a41b71c65626ee1f5a4314c7657acf5972c846468b075aa4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101989

Malicious code in surya-kue73-riris npm...

Malicious code in erick-sambel76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa52549f323d61305856dc0a24bf3a687d700a755d11106035fc288a8fe1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-empal45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb22b138cd4df958a43233f0dac4b36508fc71c96b583d30ec98b2f7dd9920f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599692e6bb106f45cb2e2e333aa2cc989348f66eeb9288b3e0170564259cdc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf98848e19e3125a1fd502e5784ff027ac410484cce255861dbc6a82f675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cc9a44ad249b2213f0eb2071072dbfc6fc8b598850643c428a7ac94fde12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lengko86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16caf2b68e159fe820a089d2a968b7d5d849d8d964c73804fbc7c03c15afdd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5038e53eb51d695627c84ee20c4c48940e1e53bcbef3d423786428b2971945f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f316a1bf001c87a228b73e6bd8e02ce7c56b99a951d60234552eee9c84e688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127439 Malicious code in intensive_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d9da5ad0ece02267f55b8463b30039427fe57c77120c2439ef5fea8c79ea46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127406 Malicious code in independent_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dff0988acdf36a0f941b4816d1e34d635cb6a13b22c5ed54e1f9f71d92b1850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130784 Malicious code in udin-telurtahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3694805d1d7a04f644e0dfc8d84c561de786af9f1677fb84ca9fc99b6a0372c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129778 Malicious code in riana-nasisayur23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56fb00ba280e771c3af1cce6cb4775d0a1894c6b4545a487ab4b6b7f69cef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128663 Malicious code in misleading_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25924155c350dcbbd4a8f6242ebbe4edda659184d35613061375e72ed2a5571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...