MAL-2025-138385 Malicious code in yuni-telurtahu2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1103b6e20801e8e500a5d9f8b8ef31dc370edf7eb9476fca912dac02ebcc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137453 Malicious code in tuti-serimuka10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad28e81ecf823c3c93ed2d8af1e6d57c52baf7a9df53031f63d23360317f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137871 Malicious code in visiting_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970fff5132130be770f26bd65fac2b48dbabc81d249f13046caec891c8d33108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133820 Malicious code in gita-mangut38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8d3b81d42df20c01f84e141bdd0ac42f67dbbf8bddf0a005e84a986bd9c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lutis48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f684215886053aa9d223986a6967cbc1dd1d1ece87e2e7a00044a1aa80c092a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1121df475aecc2976fc9a2466f9812fd750b7cf626e109c4dc97efae66f30e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakwan8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ed748d8303ebae25982ca8456348235e7dccb069d315e4ce0ddf68765537dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c51ee808bcabdc5eb4ce67733e7d1f012d313eb25c0ea45aa9f727f4773af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasi79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f2f3190f6aea09e01e4d2dc3dc48c0d5dc8469aabf0c19d990c49c29b55324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-dodol91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47656577513ab1b9003e489e4b9e32f2332de74ad83b8985ba30c5d9f959650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-lapis82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd6de3777ae76bf8cdc2d5d234ccc7c7cb08f7dc36ea11a1fc28779bcd5eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-getas33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d108a04c4aa6c91b843cd105ede7d397b38c8afae4299c3bbefd3d5e087348a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-brongkos41-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9facf567d6b25ebafb3c6b3f61a72fd4a86303c8da15f33a0e0d1ffcc80ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c87e5e0a1019009a282f0a2c2187bff366d6b57da7a4945a1d458bb0b1e7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-semur96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317ddec959aa68a01a01d5fc8f21ac88c3d903845fdcacfcbdbee1fb1db38080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-jengkol97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad486e8aacadb482107c9ba6f3da255914d5338c22c6db056be689dff1fcae43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-rawon62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f5003305d52a566cdfa7bc76259755a5e9cb5c3b5220cd5500ec2f9626818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062f1833366846443d741c74b9d69d99c5a3601fac05c8710d5052d948c6c6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-soto28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b71705de5b2e92c4e578dd36b0adae393091b6993abc993de73346b60b781ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-otak-otak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b9b364f9170f6e7ad4c970bddd383737274ea8cc161a29dae496cbbade3644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...