MAL-2025-126444 Malicious code in fascinating_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6771a17d5ece8bffc36703d7b87347ca52f8da3cfd467bc3c56c67add53e586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127704 Malicious code in joko-keripik88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace50fe39e782666808954d09eec65a6d467ca01006302eea78bc84e86c6e3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tempe29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0a3839e31f801266e03356096ef5e72cad26dea8a49d7b8ca7c74d4ed843ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126067 Malicious code in eko-dradag35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8bbc0be07ce6935d06182be98c1a0c0dbf62817641b8d261d5999039ed058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bb763918f935f0433bbbf3edbaeefbac0b900500670149873cb044ea80c4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-getas94-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad01d375f19daf8db438fc690f6fc22135c46ab93b08032aead65c596282abbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tiwul76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd7a1b0ab0a1ba257a8a10732017df2c80b1b2280cfee506173a645d3a878cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128577 Malicious code in maya-gembus5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb753382a783ecc88cc7e23423fc3921db353bdfff76fee208ea0d230bf4b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b3ce6a44741aa59506ede1d703a0f148914a295fd493372ad83782ff6de2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62c7481ecbfcec282dc2173e0030413f562f7eb399d624e2454cc94af859615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130660 Malicious code in tomi-telur1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0b5cc4a43584cc42e4da0941f1a9ebefb2ca8d5a25ff55a55e0dc5b70af05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakso27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f6c3475edade34a499d46749d942ac3942a62fdba7b05deeb638df401b4887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kacang57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d04d720486b4dd95c97ebf098213d7fc6c8223832573b20f05d73da00f15c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-taiwan40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b518c65ec7a38b8f7df80b78dc4ad5cd4bb6995a578c165ab702a25d5a9eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b3de7d225c5ba27a8053130be84cf1506e715550e2b2f7f882dc844d609ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-dradag60-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de2722590caa29c370391afd716b7ee033d904f278d7d9e133bfb8ae44315e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kembang93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce026622e32c7b41f8aa610d036fb180024a1e179d4662a6b50aac175323dcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-rawon92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa483a6e733f370e57a95f78689c8fe475b2bfd0ffc4f44374f411da221bfdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbbaaf26cd66c3562dd80614cfce481c345f36da1026aa0dfb3a5a4701217f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90f97563b43bc322148c93f5507b8d8cf4bddaaa5f6bb45de0c7e49cecaff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...