MAL-2025-126106 Malicious code in eko-oncom33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378bfcaf93aad220aa738996c7e259617b88d4d98d9f3660c4433b0340b80175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129470 Malicious code in putra-kacang7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287faaa86d07fed3ca8e6397da67266271b2eafa189cbaf385f5d5213d4a1f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127179 Malicious code in hendra-kue62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79cb92d7bd416d96256296cac2ccd79e1847fbbef2af8aa2398048f5f23c4ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128480 Malicious code in main_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17f36609e191264a9ae1b1b5f6115cac8be4420af5b6d15247d3eefed4b726d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130626 Malicious code in tomi-kolak19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20a4bd8c734f42a0186bb2a32065404ee0b5d70c41777dcf50539a89d8bd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126295 Malicious code in ethnic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546c3694983adac80df0975a54f2f23038206f41caf9ff6cb4955c8676b62900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rujak59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd9daf7e7880712a578c126c41b2f76c6b831d811d020b27f09973fd57a7a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2988b245a0ce9972e427ea6592abaf4e78d740951668c334f2442088f8dbf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-empal91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e04cc183223cdafa75f5b8c04dfc03601e83a78fcb271f79bdb5b8a9d8304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ragi59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15b0a8256155a5c2ec3190a50f3dfaccc85e52845de39fd837af4afeaa20e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kentang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d679c62ed8a9a58540927167298a053fb71a1960d3c57713d64807f9cadf26fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f697080dbdbdcd4565c8e9f2df6851fc059ecaf60869b645d4d280814d83cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-oncom13-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7908c588fbf5dbd20962b9cd5be85f6c16215d36be93aa8d782c99ca4e1b5478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-mangga69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0931c6ffaaa39c1f11616242a026973245dd501ff61454be68b34102946f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-klipo61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c311d6e7e83f6093630dc9cfbb2bf909d2d02ab03efa8160c0baae16ea7fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-keraktelor29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9add5e655895a7f94de91c25917f0df0a0707daeefe7f674f5eca2344764c2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mangut52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb7be7e5fc74b0f719a99fa9b11fc66279252d4a7c04bc9b9482d9e50c9e0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165744a7152f360380786dd311f30cdcf8ff9ee81a735e6b4398bd97a060d944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-sate91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c5b6dc0d6f522bd13178d1072696ff66c2cefcda9c44ab72e3cbb0faf9c60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kentang69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedb951088762c5ffdbc8aa3989f2ad2bd71be911c6ec78c259bf405461795ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...