MAL-2025-125349 Malicious code in cici-dradag42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11a81f80b779a9c5d96bfc6352e019bf47eae972a11cf24e85dba115ead78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128537 Malicious code in maman-sambalado74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a21a1fade685c3bd5ab152ebe15bd7cd1a681f0a1787a58f5d1f868138ef84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130076 Malicious code in scattered_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e842199bde2d9419979798c9901783385311bb855052c737b1924d5f7fc7835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acff69fc7391fb514244054dba14c5592c76d883c3353d047da0f77eda0c9369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-saguer91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d5bd938815a95fc3ee488650c2eb9fa0a8fb35d444bb34470dbbcbc0fc02e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleased_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090eb1a78e78f7811d9237b512e1bb6addca3e0192717830cdedfe29cf0354ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441ee512310e1df4488a2b8c446d2dac53bcf83064c39caae531475535d49e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe92c220eb9b770b70279484b0571bd2e455c4fd5cfe1e3954bf77890a66c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386aef88193c2677b7fbcd8f8c3eb81685ee45174965954a9a8c2ebe6b66a114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-rujak57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e9d9434bb4e51afaa9bbd62e6b9cb2cf270b18a1341f138bceefc831e96879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sasag40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8640c944ace821bea40d757b6cca9a9d0c9375034d5df4829e1c1e46d6c46077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-sasag41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278b4944e0167cf8848e2e156fad1e8ff20be15b7e9bad21eb32c733c47de966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-jengkol30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dcb64c5d47320b7263614de84110886f956c4cf2f19307a8771712a08d7fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-menjes17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a004ca868199af23e66b2f3ae8887b5fb8a69455edb22050cc2ec947bc9317e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ca1df69aec5f7c5eb27d3d7d7eec52611d36ab428d4b24a2c58208b7401c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-keripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e971379e247d4c640907ce64e53b7a5db1b0285878e826f49b63e0355f8b3bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130088 Malicious code in selected_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384903ac2e465a70da287f33b280b83e090b19ff3365e3913dff66b20cbd90e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125022 Malicious code in arif-ronde88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c4a633e1361fa883a4807d3dd045506847dcd43f677426d583caf7cefd289d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130754 Malicious code in udin-lumpur59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63af61c7b3ec74e29ce4fa108ccb2b750682223411598e0d3d79963b30bdb91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131127 Malicious code in vitreous_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebd14d923ca5ccd9429f656aa9d1278554c60bc181ae6ef2e6ece9dc9a15328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...