MAL-2025-127846 Malicious code in joni-sego98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e3d9ecf99def453d89162716777a1f79ccdadcfbfdd9daaa4a023e069ec00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130101 Malicious code in sensitive_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2374c5be91b241f1dab7698b266b967ebd181716bdf4d1c520a2233d81ffd9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131381 Malicious code in wily_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133214be74d9cfbce46f02ecdd1eedaa8bff206560138fb910026ff0a3ceed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c073d0575ab8777a64cefac5e8f28c2705e8f250d7217a6cfa8e8a968991bb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e762583e28b258312998bbe5bf6b82385876892b0dbc1961be167da36b3ac45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telurtahu28-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03d6b1e21c00362727b9089a28b1f77bf63f46cd22413d295285c81b4180437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketoprak35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c0097815fc4f3f5e7679b045009d8328801c5ee5ec903d566fdaa8e2fecfb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f899e2a8ac13e47561d20bb0178c64406fcb1779ab497f75f062c5e5b2e0d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ubi45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d00c51d1090693248ee0ad063c8b361680b9306ead0ccd2a8e0d4d7890d3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-serabi82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bdf4a16c2bafc4c8b44f16e0aeaaefc616932d6c76ec49409fd2b6d58b5113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gepuk76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2836efb3837dc52ac78f7e92d5f7676c3d859afc33a68b32267881578b08205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d4f9d379d9b452e5a6db7039743a8ec892bf898a78d30631fa042df4f9b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125472 Malicious code in citra-esdoger5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb078e615e4956dff7bdde7fa5400b59de71f03059d5272bc1085f78310627e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125888 Malicious code in diplomatic_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b856121e8c1321f6c60990b71e519ceabf4445b4f630ceda7c5049e6d73323a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780b0c6a53e562f19353d23cd324bf384867c0fa91eb7343fd5065494914309d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rojak54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fc97c4faadd1fdd0e15c0e7df16fa5151ef9c541c002b320efe0972a370ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125894 Malicious code in disabled_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943b8bbf68b59f717c713a923b1c6c01aa850a436bd9ae8a618dd4bf55e1fcbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131153 Malicious code in wati-bubursumsum73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f231c032d75d028ef7b77402827bdea9c3ecd417f66eb675c7822506b127178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130984 Malicious code in vera-pisang15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd82b6162ac31e24842da5a3750d443bfc66b45392e4890613fae2f4c0a5ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130348 Malicious code in structural_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8b95b0b830986486db97419ff9a299eb93e232b8ae0e8a336ab9e06731ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...