MAL-2025-137388 Malicious code in tomi-soto40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d71a1a0499ca4f0b42dbe893c37f3afbc2900ccb69a1deff430ebbb896ff16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135983 Malicious code in ogi-gandul97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3a7e676acb76be5eea0df804c1c772eb598ecdf1b1b6f01274c1ccbeca027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137883 Malicious code in vulnerable_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc800be9f39996245a5e8c82d46702c1cb5f780053f16b21410d3eb10011368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132896 Malicious code in dono-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3ede7184bc220c68f471edec33b4f9d1614c22296887a9b8408e467076e0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kentang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041808616be661d9de303792023fdae222d9f35f160155e836f84a30472d111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gulai44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c33c823ec36a025e786d8e79dc59a3fcd2a17066c3edcb0920e9218450edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7224acc91a6c60489786d45e9e055ab553794c5c750f982ad34af83a8b614153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77671d77e2cace1598ca6357519b8f44c71b775650eccfe69dd7ea8a989d5274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949b19414953a5eb293debf9f1e5bb85e29c97c630cd2146a4dfdf5e04cf3894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tahutek45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cf56df61f20ce79678132d1c7bd88f83dc566c021622f8c87da510ac0cddd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kupang91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12ce9656e05e346452116c318ec7f7671a92a188fd4cc6ed80340bdbd7debe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-mendoan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d7e8663357a69bb0873691c54e8b61ba8754408571aa3ccc2f9444f26a6d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125518 Malicious code in citra-sroto13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5874af0eb2d5b3e1cf7324b39d04c442cbe217418293e189ebdb1bf93ece2017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125597 Malicious code in confused_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070f00d133a33ac6b0ccd3ce11d3fbb448040465f6588ac1b3c4969a929b445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127924 Malicious code in kiki-tomat22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468eeb4b852162e6f4e6df9268a48ba6f99dfb47d7ebe03ec073c62790d3adf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129824 Malicious code in rifqi-kacang14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2715e93252e81934fd25c323a4af86c31caccbf1b08d1eb68296b57eba65d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4c04ecb2fad7ee26e188d858cccecb7cc71b41a803e9a523057a16e5f643cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sego100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cb932ed363cb789ada40e63f49727be9cda0d20aa6d77b7471ad585830e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-gulai24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a932590504998bbf642e9118a3c10f81493717b74366c524804745f7a25bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gado-gado23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e2089fd37e78438170efeef00794f439900a86acea27de7110297729966b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...