MAL-2025-127440 Malicious code in interesting_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d6fb53af959f8eb8112c494b5d1f477df99a44b01e53d719f9c95187a5c4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127320 Malicious code in identical_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ec52ca3aa69dd497c112a31483e2dc533a04fa6dd1e82848d346077f785df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131808 Malicious code in zul-bakwan87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b738d850f71f7fef968b878929a976a1f243853ed01f57f2c1cfa74bd508515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c6c45d01e9543b3fd6f5eeb869264f7254926767b07860b964dc8ebbbe9fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908aaf778c3e59d04462900a312c62b6b1519633ad6e8332250880e8f72d2773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78f4a8f8c99c84887171abd3aa542db1cb6703b9d4b52a78174f9d5ea95d0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lodeh43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745835a8b69608184ef6a28847b2cce020160315b6cc1639f16355689d3e1352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1645321387d1f429ab7c7ebe40c0c3baa7598313fd46f49ed77fc5de41ca69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-miebogor98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0830b93a39e65fb0b8d1aa28c9b30f7a585929ff65fbb866d529f4cb80d1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tempe42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea088b8aec775ea6765dee5470d12472f80d67604999ee57118748d4be832c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cbe10b63369d3fc67b18b61294f2246e80981eae979b9d214e74701e0cd00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tek86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1a745aaa5f564d57583dfb6d71343df499a0e36e3ece5e0ceed30255d6958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rojak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fc97c4faadd1fdd0e15c0e7df16fa5151ef9c541c002b320efe0972a370ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9b99249339763cc2ed12fdfce3c9497ecfac8941ae5022a9666a61f5d12258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rojak16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bab1aeaa2eab2fe1c4b83bcf0d1882e43de89570d72b41574beb878a5d76a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127194 Malicious code in hendra-oblok40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b00c1aa5290caaa9427db78ad8f557cdc6497288ba41af248601e711aa589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rangi47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d9073597d5591c8e302a8d57619f70a8421b91cd729273742dbf747b0140d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129831 Malicious code in rifqi-kue18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d5b78fd352fa976914f15398ed3fb7acd9ddf508b16c2cdc05dd8d4f79db4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129064 Malicious code in ocha-tiwul42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee1073c5764749b85e15f64f8f30b3cbacc9b843e1edda03c91059a31ea633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...