MAL-2025-126627 Malicious code in foreign_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd3db9b1f415808baf49f84790293a12899d6c47f3f6beab9fafefbc2399d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130001 Malicious code in rudi-tahutek46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b802bf83f2bc4185dd7ef79dda34a18d999287e960435c1bbd38b55a21b0c7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124807 Malicious code in ade-keripik84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca2ea39c34ca4d1fb05bd02027f53f7b15fa492ec293a344261d2cb11d103a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130437 Malicious code in sweet_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6976662d2db6b66efb610316c74582db4f65496f2340b17ad034ac0808eea929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127285 Malicious code in ida-kue93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad5386bc308bee0574255094498067b61db583a9ea9ff5a6cdc37b40cbcf21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125452 Malicious code in cindy-pisang38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c22bf57189491596421e17f967599d482543df109a903bef949cfbd660e4c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127857 Malicious code in joni-tumis47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc55e84a7f86b2c43fc12d48403e3de5ffe15fe160cef1d6fd3d4fc2288938b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kentang77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9590e94f5d5a3be4edb7c7f7edd22ba0ac38efba381cd3c8b7160fa70f32de27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b62841dcb8ea99f25d82ef06f81cd5ae3c318132e833be2174db6321ea4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb37ad64c366794a0606a54f1402a016c9423f3de4a4c37b80c0aee3481c0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbe0d15d3809965ce7f1907b281e58eb49a7f1299e6cf02824849575c246253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-semur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7e0085ee468e3bca3e78555fe5d8191f146efe548ec90dcac83a439dc1f4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sasag33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fd48d2f980c54ab30661e50bece680e5476dea57c7aadc38678b2db052addc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-pecel69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e221071ad4463acb06f5dbaf74a24c3ad0c45b165a6d3d8f4ed15d8fb4dd06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tahu36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa8b73f5c7dd5bdfc18c6b956776cbe477072ed6e8c55652e5e1724142532d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gembus85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021d745dab2a315d39676b8bf06090cc09f059d1b71326a47a05b2d6a1ac3265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ab0dd4d0373bd94a209ae41ba7f86789cef1a86498c04e082f7ec97d6f5cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bced7b6720160fc376b183191ca2073cca05d706fd89a0c01986de545206a7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lupis20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940a05bf646a66c0d31f804cb14aa4a65d66fa73931747f1a2eb6797e1585ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-empal47-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dd803b955ecdf197a91c2ffcf24796b11531089b1a845c56d3502ec747a831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...