MAL-2025-128291 Malicious code in lisa-lumpur25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ff4310867130eb7ff803b343a89bee6ce4d6a014585cf468552ba33b265c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-ongol-ongol63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a16ff16e866f1363f9c146a21fe380482d05f0e3eb4dc6761f64b39c9fc059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d802b431b800eb825ce13f68c09e2078b9b514e12366a1183d89e78a9a92c373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mieaceh8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b829af535bb19ef2e9f38de1376a8ea4f2c0d39941b122a10d2c8b4c59da649e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-otak-otak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0535dbc4501104a3e426d4bbb9be18a397e6be1844e9a6a3d30be29f7861b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d8f99119a766b09e1e318fcae2fe031ca4fdeff4887fac52a15e388b7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-nasicampur17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb876e440f575ce517e86b2bb83fd48eab0703e2891ec2f0aee392e63f619663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-peyek61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaad3eb407725c72706f14a2f50a841ac610d7da0d9b0d2771539b010f1962ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3afa8ecb58df2998a8258f973d440e5370d074d9c45246f2d26fbb53d943b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baafde60d34ff8e2e962a7f714260a20aea2c4abfcdd639d379432f128b34a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-oncom67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe14ed6c4c26a1eefb9b71389382aae1a845a37229b8d8a8ad8cf1fab9125a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8382e3886bfaeb4850776e5265e2bd10e27231211bae269d0530c0e6e6692a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-keripik4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188d035f11f7aa4d312632a880d81655aafc4559e688c7c7fdc7670d4b79115a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gado-gado75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d40e681d8bf545e6ef454ff3ff78a738e6eb17a9427bd07942c9bc08ef4f01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managing_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8fd21e359591dc570467de305782bf29d9f8e835b36d7ff4d87bf8fc5e8251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d2c61df02c1d0aa196409091070cf42ec92645df408e301a8836f3fecb1cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c4c05c5060df878479bbde8a2317c8e3f9884ba4eb5f847f4a8fc2db73b858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lodeh46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3ac17b4f60ec2616d6787109850f0d245b40fcbd194a4c141c2312d26f3159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kripik80-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccf6126c432b975e65627a3140223b4e2b82735efa70e1177ddcd4d8eb2c2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lumpur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9278416e6db275d83261bd588872f3163da76b3b580cc2a4f6b43495f9010ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...