MAL-2025-131801 Malicious code in zesty_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ae8054b2a24b5496809863c556366a3b98a5bbc3984949c8713164c591e5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124829 Malicious code in ade-sego85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8532d521a76e926e7ed063aa88539fb71bfae0def0e9716945164ff652538e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130319 Malicious code in stable_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90f97563b43bc322148c93f5507b8d8cf4bddaaa5f6bb45de0c7e49cecaff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambalado43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86760e445453acd05795e2c042956333230c39d1f0bb907791135e9768f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-tumis68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c74066afdd74daa40c3faeebb908812e0ab559bd285d30207d8f5f9144cc1d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-wajit2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abc53f1e605956f2c77abbd5321cbe3f9540328d4784ed5494b6c45bde138bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-martabak4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f013eba1dc92b906bea9125011bba68cd7c035c571ddcf0007e8a049201e42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5fabbd3a6664118e3f69d9ff3bf4816d3e04be706505a42aef0eaa160f580b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mangut66-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa4e9be01df2cf8e6339702a3d25ff39129d944a4d4cb0b7d81e25c4aa42168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f1779c4ef583b182f42ec1ee9f52beef598e6af225483f9c7b865591d8d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-donat78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c272c6b613bd037b025c2ab657c2f01ff288e7834889c4dee3976f06fad0b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-papeda18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e17bf12984ee7c1f3d203694389256e91491bd652aa213430b250860a888c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca67d2d4df3873750c9b6ac3a5413a6b8359f5f9822a62ab3a119d8add2a9ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-esdoger23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402e0f43e7da6a3508d75561c2fcbe15e9185d31bcf2f47550ccda8d1e2f68d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131235 Malicious code in wawan-keripik40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7f5152fd2420a387fdac0f8b49fc6c6f50f78146be2db44894085a99cf4c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126109 Malicious code in eko-ragi91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a15b4c5187542b451ef869c63a077da5666c3aee0f37e9323da40842371ef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126156 Malicious code in empty_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecbd661610183d47334950e4f0ee7c912a509b95479482f470887e950990d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127351 Malicious code in indah-bubur65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffc1ee357042f75e929ad6dc6469cfd37d62939a2d8588ddbc6ae798445f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131568 Malicious code in yanti-sambel85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d95c8880a792743a46cae041060b74859020817fe2767415b48054df6a6ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3bb2cc6a93b00acaaffd93af2c4a382c791238bca0807feafc1f23c832644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...