MAL-2025-125943 Malicious code in dono-oblok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a3261e6ad7a596ddcf79e115bdda9634cdbd952b2084db3e700f434ecf07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127100 Malicious code in hanafi-kue28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcdcb929444aff1ccf801f7ad0c809a002045c64888cfccd68eae09ddbd88dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130023 Malicious code in sari-gado-gado79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb450668ac788909eee1f30d10e119c36c40fd744c2980f8c6117e105416c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129778 Malicious code in riana-nasisayur23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56fb00ba280e771c3af1cce6cb4775d0a1894c6b4545a487ab4b6b7f69cef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130740 Malicious code in udin-klanting61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef26232b92723016888208fbf24c4ad785e982b1f0a9db68698e073a78e0b369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tempe82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aec9dbb61209a7582365d8050236c16327b2c5c17f6b221e7f23fc9ce7a4534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasipecel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf98848e19e3125a1fd502e5784ff027ac410484cce255861dbc6a82f675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cc9a44ad249b2213f0eb2071072dbfc6fc8b598850643c428a7ac94fde12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-enting35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee031f37509c2b6dc80de0b90767ff77ba70b9bc8502775ca90e6912b15667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101989

Malicious code in surya-kue73-riris npm...

Malicious code in psychiatric_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a51d0bfa615a74adf249c751a798baacc8e78948b30f50183d4c8af90e6edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103221

Malicious code in okta-rangginang84-riris npm...

MAL-2025-127439 Malicious code in intensive_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d9da5ad0ece02267f55b8463b30039427fe57c77120c2439ef5fea8c79ea46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125926 Malicious code in dono-keraktelor22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99552a3032aab82c481f3df98b4b8ebbbca4124000cfc784f7cb2333c2e17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130919 Malicious code in utomo-menjes79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d215964812e50b2784141b1fe81acb4bc3fb483ac2abe6b4e3553016af72431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130857 Malicious code in unexpected_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7873c3dd3a8b696a61d8198715dc50a55692466e53ff21a6f9c13fd11d60b0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125100 Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130330 Malicious code in steep_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e0355f1175dc1140ecd6bc5133f4496c21dae7e96f628dd1ac588f6b68e0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...