MAL-2025-88625 Malicious code in nadia-peyek22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f66f8f6cb5c146f8848894a1a9e8d6ad05383fea48bb14b5115b60696e6a4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89486 Malicious code in powerful_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc159dbedec04fcf95ef95b3e8afd393bef370769eed825e199301a1d3c03e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88766 Malicious code in negative_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08cfffac7f3ab6b9684f23acde3b52c0addd70cb4dad9d1a283580db27e57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90950 Malicious code in tania-martabak36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8f2edeb3cad4719f763c8e81ff2fbb4114c0da47ed521da0e74087d9ae8e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-menjes60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bdb702123a8ef6161bc691fa1af1f427e2f84523eabd8b0db785c66c11423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9192d749a9ae3eb99843ef28777ba2f69d45b2c662c2f33d4c1fb5c94e2abba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasiuduk53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e121b1fc13687bb0b564ce0a7f57d8ee3a4dca3b59cba7e70ac23e7d9693ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765e063c4052be6920c33b8744928653e47537b01c35a9118790189c407a14e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yammering_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8465882bf481547a49901096144123ba464bce5bff2bbd00b0ccc8e60f87e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kacang1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deab6d7ee1950f30268bcfa60f3e7b24c14b37ef2b33f6dfa68b95366d1268f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-ruwet6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05666d1e75f24db84916b42cbe50b878ca815e03cad75475cb64a63720e6463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-semur35-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71344ec7e5d4007bcde07f413a44f58aea22d8ab15e0fa2deca3679a27ba908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44f0b1d7b5621d6f2569b546f8739a7c8568d0fe39cb89683803c7e39d3d635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-otak-otak39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dc14cd105378e691ff29fad577329c2d06f0afa4431323e231ca69595a637f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-rangi83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba4d020f7c31553486ebe4f581f74d09d04c230f0d9a6d39a2347fd437cf48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-soto68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa73a425c665ab413b1f9136a6860c095147843cc90435cec3beaa23918dba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-martabak1-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4978b55572628a806ee307e8728463b768381a177efb4f386477e50a18d009e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-semur39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709cfebea446010078b31c6cf2b006fe50a6ff03953bc49faf9387166b69eae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-ubi52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e9d0d9cec7fc6de460a383e502926021908c611c308f2e6c9e92ace359bbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getas18-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd884b47a9244763b2060ca0f5e50e40a1dbcfb65612e8f6cd5597855030bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...