MAL-2025-130407 Malicious code in surya-kacang23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bc7ba7a4f236ce8c85e399ad776189a04d55de09c2f38d86a062793f9f0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101998

Malicious code in surya-kacang23-riris npm...