MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless-ivory-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d60a4ee774edfc3c1e340bded653eb00241516c929eb4a67860e6bcca6446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138647 Malicious code in dead-beige-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82f1bc8f94c4af627e49453ce228f8a52a22768038b9f66ef8865b0a3276be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakso91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b0e4a33d8aeb1a341c1c75a16a8ec5bef60e1c770245afcacfb5851b04da5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9a3f82b382e03bc5705ea2bfc36cf20b2a514f0ac256fe51c09772b12355b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-teh36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86ebaf4a4a666629c4a014f54aeaeef4cfad81d82b09a152a4f6f333f44dcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gulai58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c8795a90f87594c6488fa4e857747f0a40b9116c6524909220c62865a5cd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-liwet69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17847293108135ffe0933e50a49b6e210060b386e06cd0e38ff78904289a9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tahu6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8fbd69f1b3a63b3745f9204863322920447da235547c692ee0ce9a508b6e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-sate82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b18e97b9fa9c2aeaf6f056db9e7d243b39266ec463cb1afe19ca4d9b381fa1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gulai8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927a5eac5f530a3f66412d926216caea73fbe1ba6caf83d8232f766ab53ee212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tumis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-nasi26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a147ca349ec667a9b573f4227b3d4809947352ecf4b0a36a6aa7fcab809ef0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-tumis3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33aa89380a8366d60e3627948ba12a51ad4da8188383304cf9d3b953b26dadd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-pecel72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb672cb7cb89164904bc91c61e18ddf7f3d63fc2d219ee8c74176f7b18ecbb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sate89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d2eb57e32567ad7dea836c2f5a30c60ab0a4014898962d0013e7812709603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-serabi2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ebd95d6cf81b1be67e9f1f56ce79937959f21cbb5d65773c0b9d38079ece37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-martabak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eb3b2dc98b0b4c873ca2be323ba2a73bafcfd820423022c2baf116b9899d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131778 Malicious code in zaki-pisang67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6700435ccd7db74095d3adb1e6f1fc58b8c145802d2617555b45d31ddfdfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...