MAL-2025-130791 Malicious code in ugliest_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18fa6ce6d62455bab3b09f214315a046bec88b05d3254a1f74653353ec6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130917 Malicious code in utomo-martabak16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79d6490babc5f49bae6d65f37fb488609a6bbbb7293751a0f85a51c3271ca9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127333 Malicious code in impossible_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0944c87434b3e078fbab0a2433876787886d13d740482b7df953862078c0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b4c379dbb824dc8ac6d300775b70b5cc41ee4798259f81b8234aec5b6b15e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326986359fe897a88ee1b2bbbd6b6f032ddfb9c8e6903e559ce9aacff5685189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-saguer22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e03966cf27574c39d28cd97431279cbf48f5c81892627da0e072d63428f4776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501fe8863f1dcf898a779b1d69ed70639f2cc229b7946fe84de546af4df6728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d54b3cbf001dd587e7b98768c5a076428592dc8324e60348759733dc41bc481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-wajit2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b00c72ffba4571a05e33c848a255f1267608fa95abc21649d3686596bc710de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-enting68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b6b7b84ca706fd9a23540af349f3f3ed58325893b5a88b23a6ae513d0f9abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-mendoan11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e23c9314f2d3aee69e75c1c093bd1d0f75f16f7779f71ed4f8195cab2626905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f733ae7b7f78ddd9f44519eb603c573f04355741ee5d5d9c177f56ac11554f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85faa5c08b32c7a49ee67a361530253ee83887bd444d029345f2132fec41eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-gembus58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658ded7f5ef134fb05cb8bf19b498da07344bc39d7d1c082c498bc34b6daf965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-liwet16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f179dc0c8670b97460c0d976f73b47912cc26a8be86049e4d7f9ef472885d38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gado-gado89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45096c03259eddfd48a66079a7b8bd881d546cf33bdef419c82b26d00aa6e085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3453c7e981a4ada4770f2264806bdd3834d1bf63e80ccd05ff2b90d65c7ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86fbab75133951896f56803088c6d40778f9e8243a3d7bf328e6a1f31855099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-nasi6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef99ea4b52ae0f309aa3bbafe927d57637da6e5e7f3ff2a62e229ae473e7da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-soto76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc66091ec0149fa44e17dd4706aca7a544968d4a41b663c35d9f538a199deba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...