MAL-2025-128725 Malicious code in mulyono-nasi43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff0cf20cb9a7b04d1d5faac066506cc93f062ad5c9ba623c4e26abbf17582f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-lupis46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eced49d12e20c34c5699ffd8c27de2d7212d6d28d1fcbbb85cd36582a3a5ae07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a323fd66ae2cd453c2ef630bc76ca00e20ba10a82354ea7ab86538ea0ee0367f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c970b9097b7e781f9a080580d02274dc9edaedf76f1d6ada9deb74d1f7f2628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b138431fe268b4e04dbeee4996e956f165b6113d8a50799cb9a9a60ae56684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3821b35a45cb45e06058ae023b34c524711da17fd105c978f15b72616a9fbaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rojak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e44c637a18a58ca0ec535b4aeecc5204f8772a77a41f05f29926da46854398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sambalado27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f2d6b0187eded169096712dd0f3e06f7ffcd0636b416ee32b359bac35daf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-pecel33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a7b7aa6bd2319822cf7e9863145d3d3fc49d1668f7b8c94ae331814e2ab8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-teh32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a808da90a4f4493ef8b292550eb7f4c61e78518a054480813ba94c2421bda12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-dodol63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b28c53e5bcd52ef6a5b22a86ec0a822d1d66edaaf7b7b00986a8479fa2157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-tempe58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d026b009c7e13f61312d7a1ab5634841b865794f578f2f827cd0eaf81086f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5397d23b0e3593c1225935df276dd388d7cd7ab59d580b9f52b8f0849e35b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-rangi9-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8a64ad5a296ecacc052babd5649c2e8217ce03d7638d70a11b38826fa98478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844148c178b421a4e6eae7c1fc287064a37bcd3252e143ed0ff4c4ba3a64b25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-ketoprak84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae15e7f7bda5d33ff46c589aba1e241476847a7f379e3f743854a28b778259c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong86-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64bc5b7e051f6f150b5e0c1e46e6174a4f8fd56a8b3024a1c17fa9c6f85e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131754 Malicious code in zaki-kacang81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15de1c172b5c8d173b74ae76b96ae4d3711f41da04573f94c2adc4b86e227939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131454 Malicious code in xaver-rujak74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c25b28c450bcbc367d349c90985e3a547612b2ac528d3fe0a70f4a6478c211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...