MAL-2025-137308 Malicious code in tiara-ongol-ongol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2edda9a38ee938f8a9f044354874d6ccef98ec8599525a1df00993a4ac69ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132204 Malicious code in bayu-donat9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21e435789c2a5a4cd37f497e57e1c1d0ab5c5899a14308e313920d916689424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lumpur52-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f914a904da6da32d4407e34af1f0f5c2b62b5a4b7367d0b0ca3e842e4d2f9e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae3f9408619491702eddeadc351c39de63dcf0752cce45d34614baffce43c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-nasiuduk21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bfde403c18a9ae732d58e17b4fea56dd327b38445cdd1c3919396f72f2ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b856121e8c1321f6c60990b71e519ceabf4445b4f630ceda7c5049e6d73323a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-esdoger44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd12c95e551b3c534236586f7c3d2a2ffb41b498806b4f0702fb7c34f058f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531f7f747d90f0deb83a95e0d7033cb56eee0463b20af905721cf48c5dc96898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sate91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31438fa27a4cb8f764d163355aeb741b95e2a79599dd523fc4eefe789b7c0c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-ruwet34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8783230be0979891b50a90c655fabea2414cf9b1a9cb5c44675855957d8ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e4ef5df315d54a2c1cda4994fa214e97d7ac5efbbc6b8babdd2bf8ba7f1a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ded3b512994015eb8011b4a8e05b85436339227309e1aac4d09b73faea5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-naget34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8ee715781c6f815f4678d26fe5ab693401b32d86bda298e8277ca4fc97b0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mangga43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72d3546f7fe73e7384eb1faa80b1e9df9066f0552a40f2d8b695257314e75e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-keraktelor92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b583bf651e7a2ac85379d2923aa2c53e5dbcfa1325f3b1326b233586b3d2f1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kupat17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3575eb3df3c38eb0e78ee394208a7b52bc109ac92271d32302bea7073a37531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kolak17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1de99ffde348e537ce880ed5ba2e8efb6275edee47c14e5a0c7502d84c71791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-tek42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4715d89ca49735314e85bb3dcb269533d7247e8c71661c2a898b7c2bdfe44cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-ikan67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f53c5270e90f383720ef58ba2e4f60ffc26d9c5bb96e035428cd1514c6de58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-miebogor98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d117e3ec8fe2c370e9c933976382f1cbb08f60d008667c3eab2dd0fa073d85a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...