MAL-2025-126910 Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7319b4f716fec9dddca0266c1c54a357f2bf91207aec5c170f7565fd86b3de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c107a985e4c7fca8586ba98fecdd4589c7db003226b275c81bd9cedb22cfd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f469bf8339b28e8e94361f2a30ec1a9ab233d6305e3aa22fe9d318ec5431dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-98677

Malicious code in generalcranez3n npm...

Malicious code in tomi-bika42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be669a90fb1d77b7021f8d2515cf471258966d1f2cf36190b76a519a1b283efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-takokak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a0aefc08198407b497466b8879df73fb96cd6076ffca2cd27ed8a7531911c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99880

Malicious code in dewi-rojak3-riris npm...

EUVD-2025-103873

Malicious code in maman-rangginang46-riris npm...

Malicious code in gita-tempe82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aec9dbb61209a7582365d8050236c16327b2c5c17f6b221e7f23fc9ce7a4534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sasag31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6757a478af8729799e4c07fd4e5f79e53322837faec762e0900dd5f873d3580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kacang42-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7ab379f3a0be0898bae5f9a5ba828720fffa35dd4091be2b8048fa5d041f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cfab9e987183be7eba1d6a1783c7d351d455de7d56defb266385662d913d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c599f49782be640571be3534ff1afc6014a98f45291b46f530ade81b9774de1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb5c5563f18f2bf5012f478b028187a849ee3c113c9bebe9650c4546e7792aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97910

Malicious code in irma-rujaksoto80-riris npm...

MAL-2025-126060 Malicious code in eko-bakwan2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80726288c48fc8260cb467046746357887075bb654dc99616b3e0b352657299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...