MAL-2025-84571 Malicious code in dian-dradag29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac88563a831eff02d852841bd6081fd660105e581e49e6b79b2f08e5decb6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89761 Malicious code in putri-rendang70-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dacd5df45cccb63037eb3612f033f06dfdecdd4064fcb10c28520cfe5f58d463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15de70ba5ed8cd5f9d6ce2029892ee50fcf5b88645c968549856b876300d0b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kupang66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51fb5ee1670a4770d93fdd27ce560a4e77cef1069c7f3693a6a81642f8169ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86793 Malicious code in irma-kue75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c69d67d2bef8c8adc7291af42bb5a0a14e2ee8d8bedba778d5469948513833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90222 Malicious code in rina-tomat64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e7a8b1927aa7f28476df4e01cde3bf6705f9f43ef0d07e11f780b49734a191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90225 Malicious code in rising_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a142ed2a079f6c716e0a0ca8d65b4a5831dfc1fe96cd33e67051569ab1859c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendut45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a46561b9ed882a0c7e3d04f7b26fa281499b0e3bf7309cc8bb06a88e28de2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-soto28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367c4c842d59a38e9b938cbeed735e439ff5c2a03dfdaa9ae85adb5882788f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80cac0456ad3dd075e7a91eab97388323fde481edd92df5851183ee2884af47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a848e0b24eb8109cee31474b8b9cb0131dd4f59d39506c164770576210a360a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-nasi2-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07a2cb57e38f1479326e9b8b19724859afbd3b6aed7920c219174ed093fd25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kripik4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4faf2d4608b410842ce874ed1cba48c62a598eb760843ca9821bf459ea78ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-jus36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cab3063455be4c78dd80db2a9406354038a94fb6a6633f56671651c8a8a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-keraktelor57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301b92ad36399773a733d5ad8066c6bc3f77acb9583184368527cacaa91fbc93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kue60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1714be13a47986275c966d000adb08f7bd7aff5d5ade7a1c1cb06f9d0f6c315f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-naget45-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eefca4966b8f29dd35a4d30f93435c47fea52854819d3e8568c0e59fec360b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gembus84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a30d0dff2e5c0478a7c3744f7dec25fc4ff9d9dc917d2028745a2f651127ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91001 Malicious code in teenage_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee92da9f9f271e51ff0186239c39762fbb696e3580f33cc3902255bd5cf0834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92335 Malicious code in wrong_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0684b095d295a58c280cd0b89c9fb10a737e52cd9cf8b70f89a0837caff30f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...