MAL-2025-127926 Malicious code in kind_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799336872f9b0aa4ae825f3651a3d6db815a81699f76ac6c051ec5d6be597c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128458 Malicious code in mahesa-mendoan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fb7d3df8917321fa20beb5d25c084a02aa6ea1453c4956792ccbcc36587cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125481 Malicious code in citra-keraktelor47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89bb3b597cb1e682fdfaa5fd8fa2111dd7b7f6473a5f09bec92c3e3e01c8b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131534 Malicious code in yanti-lumpur61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e62c01dfc971ff4640eb838a64fbd3deed8f7193c6b1c3198eece7c892c3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1fef17ee4c5f641a5e7d7ff3ddccb56c7f8dc9796f164c2e631c53d701c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gandul87-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7920265d8da37c607a063e66f7285cd617a4a52d23bbb82694169327ba73b4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakso19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef20c2411759258a5e0446de8cb05df403bf224e185b01aa0cc24c9d9e11512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29198d19fb0c021baf2f71d6aad95fe0a35cfe578f09cbacc3814b8b6c2df95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue27-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7657669cdd3ad2de6297dd4e2bbfb85e7a09838ad24c7ebdea17b7635639d450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-dodol86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98faaccb1a3d5020ceaeaff3b0f11d0122f1f05d1c82994746970c1fa43dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oncom51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0ee3a77678df846b5da28f3b2775d241efdd761736a6c74855e50bba67422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ikan16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c71ddf8ee95ef71502b786258c52fb15d691ac45d578226398194b65450893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tahu57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f3e169b7849cfad1d9c6d0c3362daf75475df2741c0579bef9e22326d1af25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4515a12f22868c0b7e3f759636d3813e8d372f045a40722cc922ae47d792a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-soto72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ab0a9b3f8a19c67e0fb82ab8fa744a1eb5e0cf290305303e8a6f52bc4cff4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-martabak7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd8ba7ec75ef60ff0ad26f918bfd459151134d3e36f4aff5a166513d2ddd8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85a7230efbe7a68c5f7996cec6611acc3a51c71d32c824674e6bed011d3db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-rawon65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f947133e6b373800dd1ccc475f3a1a898e17229afb2a07e13d566f035ef66a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-bakso46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665ecde8ca157f686f6a23c8b8dfc13e9ad65f0a1922ced8f40678a6c541237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-martabak98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53bd72565c9c076af2b19456ff97ee6705eadbfb8bd4620e9465ed80e25df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...