MAL-2025-138241 Malicious code in yanti-lapis98-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da9f87135adaa3c7b3a39cbdc7a61a907ad8845d336005580915eb01c950051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137596 Malicious code in unhappy_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a180ebf39eb259b98e8d9831feb50fff44544eda2dae118311d97d6a954339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138509 Malicious code in zaki-wajit30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d83ea0a8485c0845f22ec7ac3b5098027201d74d3980edbba14a0d0be3b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c898535517dd9b629fa03f172215388a97fad5915d5a5ed145d7e0734015d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rangi96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5672e4976cb8c885892524c212af5cb88d7cd18062056cb4d0074b611d6fd3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lepet35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7b633a5dd4b2ff843366d068a329974578b837a1d897c035461533655f4f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7dbdd6cf5f2557a20938a79e0412c93ce0a181d5ea2e430ecda7cafeb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kemplang46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729be7d8222be168e6bf4793da92af87af3392d5690419b506a171f2f1b9f746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc3fe3453adf31dffd93596877420acaea268ce6425903a920f108a98109d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kacang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2b24b34677e5d50aded7b249212f55ae645713867acfe2e61aee7a69397806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sego84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6e7ec33ecb61efad632b245e6699247fa9d9b8b8777c0a1b9c8edb3a2f68c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268331e5b9ee8a75fdca60c6d911dc27e904973ed8f7c04622b5948799ff69f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-esdoger50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec03624bcff8838de430127dcec594edc4a95fcf06055c659d7cdb339e8fa1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-jus44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a36cf6982411d6992e5d9ceece6d97be17d12cb6099401407b431fb0a84b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kembang98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603333ccecff709b5ee609b8bb233d18464c07c9a393aa1d8541565bfc7245e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rawon80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf8a9af9b2b4d4ac24b2a68f23476767df50089c842ad62a74a6e492341f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mangut32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f98c9697e28e7e255e8cf28469da3632c6e5ef45e0832212ada9988f6bd50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde5a64040401b6f717136807cc0af6b97d4ef7706efe8ce017b0e869b1fd20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dc850356a563816bf71d8720de84a474486e15db72c457441f0fece7618af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129293 Malicious code in parliamentary_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631f367a5943bd01943bfcc1c5d57f81ade5c1c6370b6ec5507d88867d7a9d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...