MAL-2025-125652 Malicious code in cultural_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f717fa224352ab298f745a8c7e8323940f108bde67d7d8122f9b43a2b4e5e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130791 Malicious code in ugliest_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18fa6ce6d62455bab3b09f214315a046bec88b05d3254a1f74653353ec6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125943 Malicious code in dono-oblok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5a3261e6ad7a596ddcf79e115bdda9634cdbd952b2084db3e700f434ecf07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-keraktelor56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b53b1770cf89560aebbb7d109aa99a30a70d87561f8dcac2343605ee1715d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ddb6ee2647d58f97a6f20071ceb269e00f61770a2621c6d8ea5e86e43da4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-ikan29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cde5a6550f0f63bc03c540774605ac722f20846b489a84c51512af3c3cfeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-buburayam11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21eae86e93c9e575a6d5ed6946a1207a86566de7bf4bf4bbd14a5ccb071687b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lepet25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fc1216bc76501c2c8ea8b4a06d80ea92b249b27008d425cb38cd7a9aad3978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-takokak64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c34cba8425a217eb2330247163b8a6e13ceee550e74df838959ada292e85bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-peyek67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a72cc83f339a786ca3c18b16a2e0f0661b67a47baa4582d96f7feeb293dbfbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-semur31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07669a47d9f30248d1f2956e9f708180ba31ee365a64fa2c82045de5c138d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gado-gado89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45096c03259eddfd48a66079a7b8bd881d546cf33bdef419c82b26d00aa6e085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kue56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbbbd80111a27b86ff8e2d4df6f282d5a4daec4d7f818f65d883e5e728ca557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c25811fd18206c92522d0378b12d3ad751c9995f3b409051d75af2b7756c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-brengkes100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb635cc278f66b8f1f83b9ba6f3d92eded897f4ff701d48ff1ae58e50ece705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab0fc0ad66e45290b50e5fc2bc689cddde98496c4d2f271690d0d5eb9418d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7353b7ce9d971eaf09448019512f013a3b437835a79b81460d2d3d74f5d2584c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f733ae7b7f78ddd9f44519eb603c573f04355741ee5d5d9c177f56ac11554f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3453c7e981a4ada4770f2264806bdd3834d1bf63e80ccd05ff2b90d65c7ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lumpur25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ff4310867130eb7ff803b343a89bee6ce4d6a014585cf468552ba33b265c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...