MAL-2025-134546 Malicious code in jaja-lapis43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ac02767c2a937ffcbb71326a4246c8f82ad31026ae3c6e4db3ac7236662fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cfab9e987183be7eba1d6a1783c7d351d455de7d56defb266385662d913d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb5c5563f18f2bf5012f478b028187a849ee3c113c9bebe9650c4546e7792aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599692e6bb106f45cb2e2e333aa2cc989348f66eeb9288b3e0170564259cdc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f316a1bf001c87a228b73e6bd8e02ce7c56b99a951d60234552eee9c84e688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-semur37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a433f268651a41b71c65626ee1f5a4314c7657acf5972c846468b075aa4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-empal45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb22b138cd4df958a43233f0dac4b36508fc71c96b583d30ec98b2f7dd9920f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kacang42-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7ab379f3a0be0898bae5f9a5ba828720fffa35dd4091be2b8048fa5d041f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99880

Malicious code in dewi-rojak3-riris npm...

MAL-2025-131750 Malicious code in zaki-gudeg4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0917a99ffd2aa898d347e4cf4c4d1bc24de325f5da84a3f5d2a49a935dc88101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97910

Malicious code in irma-rujaksoto80-riris npm...

Malicious code in wati-mangga7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e96511667877d1f68578b8f7ff13e55608844ca0e5bdef1bec3425eaef30704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f469bf8339b28e8e94361f2a30ec1a9ab233d6305e3aa22fe9d318ec5431dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bika42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be669a90fb1d77b7021f8d2515cf471258966d1f2cf36190b76a519a1b283efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128610 Malicious code in maya-serabi70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b1400dd273ababc040b053b334e7ebc7f692419cc126ff0be5a3632113fcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130784 Malicious code in udin-telurtahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3694805d1d7a04f644e0dfc8d84c561de786af9f1677fb84ca9fc99b6a0372c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127525 Malicious code in iwan-keripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ec6ae51ce5062d50f41c6dc6607ef18e05fcf0e7d9b7bf3bb9bd871251efb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128565 Malicious code in mass_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1920939a51a59f851314cc17fae44bb9baac67b1555f6afa7a0543d45c21ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125943 Malicious code in dono-oblok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a3261e6ad7a596ddcf79e115bdda9634cdbd952b2084db3e700f434ecf07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...