MAL-2025-127473 Malicious code in irma-lontong81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c4e18815f77761b07f6c0cfb399a6626dfcdbed33757e4798f179d45c5666d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lontong14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1cc00c503a45e592ce351d83ea06a920ef5ff4ce9fa141efecef8f46ece304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db99487c3b19ac75a7a2bb8a1087086e6edbdb6cf7ca46b714fd5aec71a15b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f56ccf14e90d58212a53596d06ab6f961b21f38725ce5c271c81b00aefea600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tahutek21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94e3bb8fd94397650ba59b21f93046608ec925b6fa589b57b161f334f66b14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-peyek23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f2df2a3e39db8d6fda885a4b676c1c5106eb4c9245d27b7c6b8595c9a7b27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lengko72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee9de4fe4135ce11e7b355032dcbba1f412bd262b9274f5aeb685831318353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487c7acadce833e59256a1ad2b71a9bb8868a6425f7e443a21ea22b6aab32bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-wajit79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2206ba84a49b9b04f18fe431875c7b93e447da27c2c98affbe4d30748b17d3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sego95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f0827fd204e9ff26162fa8b3af4bc44ba4500a9af02f8975c6a26dc26cfae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bakso35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fe307f0ef088c7a2ca7723fdd61eed211cebb716bd70c0051118c821934611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5e4304be37d6b4a8f9227101ea9519d85417a125cecd47fc966f65ac35d1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdb980c5685eac6af0bf9c09ed88d98bac52b969ce5c4045865ddbc0a0a4985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kacang41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9f55ad27d9ac2d2a6a99a9c690a997a6abe335a8745cd90bb7ffd4b0cb55bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-oncom34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d40f77a09dd5abfc2ebbcf1c8444844889286c077f0e1038e6dba2151b816c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-soto73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d36c30f37106fe5159d9bc6cfa5409c349fcb7f51423f613509089c5e51cb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a275c508cdf2d137d1e1a438733adbb2e85d5c5e06ead26e949813c2d00bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sasag85-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52faa2baa11fecc0840521d287c09556631bf77ef1560596843c0db8aee4fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-sasag93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768c25f6a11e9e92bdbe7aa0b5f9d4481566fc8c1500c7a54969124db3382284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lumpur94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f2d2c11f5306381d538da79134b5033c8e598210ce76915cd02d826ea4b1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...