MAL-2025-125850 Malicious code in dian-lapis59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f500a34877a9868d8a91ec58876e10aa40a714222c473e7eb48a32f64938d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127148 Malicious code in hard_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275884bb8b13efdbd97454e79a84ad0fa92b46de1ddebae295c142468ff3b1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kacang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f61bf5b066b679a67fd8fef4619da9169fdbab519b44faa432c611273b2e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5c11c7288b1f30fcb1850160757941cc054ba9f4fadbc42bd268a28e492e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-keripik53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd209422e69a8b5c244eeed2ad8e91d58f91923de8bae3f5f1a86b37365df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gaplek87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30d7ed66578ca5aba01facc7592b24699adf3431c706ce72a0ff404975788c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lumpur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7c1eeefa61c1217ef826be633d68c77b81ada7c25a4f168cb22c4194fe444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mie30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfc98c5e8e814b3300abb3527d33ee5e064ea30e3108516bcea573c73c896bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-mangut32-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef730a692c7f55818f0ad569acf49bbc00afa5c3f72e7b56d0fb4b80aa8455fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e881836ad9c4cac982c3b56b362b7764629aae10e47ef221b252cf985af0f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brongkos17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cb92f59d3cf7d5ecf0e2f4b27957a0aa163be64c1972cb1dbe6ae56a3229f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-getuk86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265d7179b9d4172b5f34b9f7ba635e274c7d6c202426d44962d046048d8e189a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sambel49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85970f9a7bdfe3fd918f968c7ce042ccc3b41bdf3bbddb300138540180ae80cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bubursumsum44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9232c72be591f76812082bf8d492279a87db3a6a44f017ac8957f31edaad17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rujak67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36808d355ecf702dcc1e894edd4ee483a9d37ebb60030d30f8a9ee2335fa1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-pisang1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8883a4b6b40ec5f37142ce4606296d0998f3a34926ba8f46271a9e17203bc9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-tongseng91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d695b0602834c8d32c3be6663609552f861a5bb14a3e124f6504a99f0e742b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gepuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c8539e61628ee5f7afef45e41a9837459f3b30161deec353fc4e5cbd27cf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d114e35612a3276bbdc391165903e254d2339570a66b698a9a4f71a09ed2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kupang34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268100fc249ce81ca664688614669192a404f98cd7db20bf57db368ac4dd1a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...