MAL-2025-129787 Malicious code in riana-rojak3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8ebd7035c31c9b33ac4c9030f24fb3ad1eb5462d47cae6a90cf678105f7195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127389 Malicious code in indah-otak-otak59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b6a877fd794cce9dce4c43f813b32f21c2872e9966130807267a4b55e4ace8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gulai24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f4158c6be66fe91dc41a974e941ee78ea87955acb0d90e7e33eb2586ac4f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mieayam21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b28d0c05685e42d4e9f754f7c97e6c83fcad7698ad12b6c79dfbaea6e4ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lupis7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdba4d35a96abd0b60fb6d9999dfa45c88ed9e265f62a199d53b6d29282f1e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9045c336a3544e54e2b0d8109ccfe3be98a7c4c832e180a9920e0ff3ad1315a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-sambel43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f9bbf4e48a844e70aa3f9dfe060ccbaddcf34ea10d6c167a1972ae205d634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f20c3b6d4caca5a1500fa6b08929267d46097749d2f094480f8ee07892b5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-bubursumsum94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6f9841db9ec6e5715a2c7ff28d7afa0ab2586d43ea6cf40237d2179b6f79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-semur14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a5b73071a9f9188232d6cd5e71b2ff959cc2b7a3222c7aa94740fd97ece11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sroto23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b530e24b35f07b785edb220d8d9e919a613d562da5f099e82cd58c97f451d346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-semur69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22e5f12fc69a5b7b15e3bd1f2330e295cb6eeabb8d981990bde9cd998ab69da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b479e9e3fefe75f0c3d4239ebb8ade45f6ecf77cb59a0710855c2dd69d3a559e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ongol-ongol43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4979d896c1756ba0a2edcbd5a3bf0d9be6f523c4b9afabe0ae4d749612ea86d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125349 Malicious code in cici-dradag42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11a81f80b779a9c5d96bfc6352e019bf47eae972a11cf24e85dba115ead78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130076 Malicious code in scattered_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e842199bde2d9419979798c9901783385311bb855052c737b1924d5f7fc7835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130865 Malicious code in universal_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa56509d1bda7e82e5683d2d7113fa68ee3f3420d6bbede94ad5a6211494c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126449 Malicious code in fast_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d27b68d19eb39a7b312db2cd5ced714b0043dc33c4682e9f4079640297ab47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126305 Malicious code in exact_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836f62bf5a99c9656418238521e05eb79a49e801bafc9125ea3876a20252d0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129881 Malicious code in rina-ikan14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eea6c90b8b680383ce2c8e282229223da1b1f7e3ac3b8cefe1ada344a936de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...