MAL-2025-129288 Malicious code in pale_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497a996f2f950866b2c95470523178c0dab0ceafc90d460c51d870657a969afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131330 Malicious code in wibowo-lengko72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee9de4fe4135ce11e7b355032dcbba1f412bd262b9274f5aeb685831318353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127090 Malicious code in hanafi-kacang90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729519fa0ff85898b54b20d53e97edec2917e0d195acbe9fca7d21ed03a0b265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130818 Malicious code in umi-kupang80-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cf113337006d3bd204d8a406156dd3271121061135c6afdb8f9a146591fe0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128816 Malicious code in nana-getas49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d1ba1da4e9e3fb33778fb38b27cfe7bb64ac7edc8aa282330190e5e51513bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125744 Malicious code in dewanto-ragi39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3208307ba04acccb7482c89bbe7bfee2392de57e7c8cbe0593c8dfe24815c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128598 Malicious code in maya-lumpur48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c3595c8c4c77ef486378c97d51d956e6536fcef9f530e886cc586e03de304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-getas46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c4b2dd04350cb2b4b902800e6bed530dcd52076774951352dec3e91c245669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-tahutek52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eae1e7ebdf18c6869ec6e856134b912c5cbc1ecb0a402c78bf9b5d1a7ffa71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-rujaksoto57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa3ac67f8375ff706ffcb8baaed7b9e50baf34722053bd00ac82651f8103db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74451153c0c06c0425627e24ffcd29fa221d1285e396149efd610d6c0efd306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rendang2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad0d15b8879edd1cc5df15e2bb6d2a4490edbbed0c7459a60899b218449ce88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kue86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5dc1f490510f024e9a8775b3a38f261f37db16672c5f51ede069dbaa8bf241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ragi78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5e58a8930056ba7df46f2c97d2c2b2c80fadd49d7e0e2fb27b4d1c7adc9741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kembang41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71900861864dc018dcf87bd6d7825ecdf99ab684d228ea170bd6f933c3d05b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f64f71b4817a58df31aba560c48bf91331dabc000509d2f212258b1e7dbc112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56baafcfba29d9cdef943ae53987c9910b95f158d177bc2c01a627421fab9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-mendut18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8428db51dd8252b7350a4821c4325ee5d2e467a0578afceba7df9525c550f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasipecel90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f563874d94130459e746023952792fc4f319e8f791f9e42a65bbedef3a050335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc5d702e362a208e14a550200519209fa0c852a622fda394a46efadb8ec0545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...