MAL-2025-130979 Malicious code in vera-kolak58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd35f7427d79c98cf85636ed0ec3c2b0207fa7d85fd14d06e44fa27452760c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130765 Malicious code in udin-rojak100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac23d270847bea2d93a43994fa098c80c3f7c733adae9cf791704c75b058ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d034df1a18ce4c5cbd2d1c7d04990c29c6c9f276a726da29499890c115994072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab7825989e501c39a13d0cd53293a4e4dec2866c6ad068f377f22340fae6192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-gulai11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68de1367e4eb219dd836ce41ce4cd341c63809f1641f73e95c5ef58dbce6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rujaksoto99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc084acf8a2dcf8a2cce94943abf342d9f60912d68103b8204c2285ef6ee09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tiwul62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3909a75676d857c4ec55a9973745664d6a01d18b4349021d03d565c2756652ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lumpur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9278416e6db275d83261bd588872f3163da76b3b580cc2a4f6b43495f9010ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-brengkes80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954a67640353f68bd2e2d93f29f20b361ca60dfe3ce724a6a9018bf386528f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfef1c86b6baee7861bf8a4fcdb54bb1bd57661015647447a950e35b3ab6e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7488390caa74d6fb51eeddee36968625561e21a454c7145255891d5387ac579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-rawon4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4195a1dc319a50abb7c0f739248b5fe2cca54bc4007dbc7eb3e056945e0de00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55ede37912c2ee0b34237d9b778a4b88422da0254c670593d0f5525867ff132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-telur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fb43e9833c2566b14747e12a376535d3fdee72275c10e58b403b5a014cd1e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3df793e63ce9f7165108df187d9aeb6ed9189f4974526f06f94e289545c8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-jengkol10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6638dcc5c761a0ec5560f9c328835c6f38811656957b0f21b8c1b997658b5c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126274 Malicious code in erwin-rojak83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bad892bd68581b374b9eeb8ef85ecf9cc95dbd8493ae8736782a881507ce601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128988 Malicious code in nurul-nasiuduk58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebbfc8aacf0fe4f405d11a1ebe20479f501ba275ed787752a1d8edaf2119ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127362 Malicious code in indah-jamblang10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbf07929f6e7ea3be966055765350ececdcc7b8b630a914a67bbb768677f29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...