MAL-2025-127430 Malicious code in integral_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67a4e4a3bf39c92b4e0519021632e79b1f57ab8434e539e6bfb73e916d761c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130392 Malicious code in surya-bubursumsum57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861a2e58d6e6c976fcbc59229620da5508fd9d7781904130413ecf4ee91edf33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126375 Malicious code in fadhil-tahu18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1765d05d545a093fc4a87f42f83f839cebf19ca1029d712ec24b33bf0ee0159c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129117 Malicious code in ogi-rendang82-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae7c39a53632f15b54f8b48a756fbe3c710341fa847a90b1fa2ac1934001b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131052 Malicious code in vida-telur46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e293adfd8da5cf9b744fffcfd8de74cb9826c97435fc7d666128e65e81c11acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tempe71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88edf56a0be8cff2565065079752d70ed97965eaac0deaec1315a674aaafb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bubursumsum15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e23c94eb44d0588d1c363b3ae0acc684b0c88e733de76bcdab7314a9af8699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lodeh66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc37e8e8b6918cdaf48b6ec865ab6dc4c746230506777e1c28c2880bba9632d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lodeh14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c507ea6d4618ada6814e082ff04ab413b899057ca284c78656dbbeb422ac3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-bakso83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5a43e2c89850ca8b017734cfce5d6039479b792b2a19fefaeaa553a7d3d397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rojak3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5648c63267bc9467777fe8d24295d834740e9cc63bb108def2e0a459973756d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kupang53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb000e6f9e18642b476706744556d0cf18b45a89150ef855e2f57ac45537744f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-buburayam9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed713ef16bced1c01472f750f25d689f5802aa24744278ea531e0539f90c1f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-nasicampur73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe1e28d738dd2ae1fde83b307ceafbfcf2edf45591f8984aac2dd8e5cbb5b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gorengan23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f78cec808b2376c1b7eb04584a2efce8349b3d2b991df3f066c46b473822061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b0b93a4c945528c7797a2f9b220d7584b43c4d2c295f54a5b70211df7bc5b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-soto50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894d552d9c7e749f70de6794e73ef0983d6d4c779f3a3bdc3667297afb52fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75b0dad5b53913fb1de270cd6e978e8f26b95899b430a536f6f6751b07bf7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lumpur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c841b9914fb1420b90a85f7c06b756ff2911ec4e423945d72707f0d90f7b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128157 Malicious code in large_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3401325e5c0c185d02e09f2bd8b48d1e59a93f0d21f6f7ca283509288073e52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...