MAL-2025-128432 Malicious code in mahesa-bubursumsum18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5635a2800b7072dfddebdfee32501c9dbf6f5e79a4c745c73a4dd718d004e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131730 Malicious code in zain-soto87-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55843cd32c0105a7cc73a60f0716f6595e0c1ce8a959dbb6b46539eb8da3e5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128622 Malicious code in maya-tumis38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b3ed00ab8ab85a28d6a398bda51e0ccbf3a25c95210b3b17921c3cbcd32d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129868 Malicious code in rifqi-tongseng73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8cc1d14aa03cc281f29995092ddd095cb2b3f2c2a3628a4fec344a088c6111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff3521b7d778bef1e74e587c4d8c55b9f867a5cf13683d8ba41af970b6eadfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede5dc89165f55c44042206415ae990e4092829c3fa16ec59fe0deb9e38f78f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-bakso26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d58557a57ef47a045672ca9f9caeeb1fc4ea20a21e6080f25fcc1ff2440281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-lodeh1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457d87c46b2f7d233e9c8ffd2596bc09936a1edbeaf5e8a4481bbc076f21e989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rawon85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d6ae958355b1f61705a8d1814eb7da7eb74a36eee08e504860f47f2a6d1399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in static_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf27c248eba02d87ed441de609f321a4b77a80afe647cae2c1ade23407689f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-soto73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d36c30f37106fe5159d9bc6cfa5409c349fcb7f51423f613509089c5e51cb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-sego51-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad40f8b2ff2cfea3ebbc80ef440cd2b845652f119333d17dd7861a4576477de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rujak98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7325fb31b884b449c4c65c8a0bb2c768b7614e0444d128be74cda9834220e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bakso35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fe307f0ef088c7a2ca7723fdd61eed211cebb716bd70c0051118c821934611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-telur28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff3852cfdd0e4b8cf243c602972e4392da40c7d89cec3b2dcc5a89d1ba69b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mendoan1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc4dca71dc272f979aeb475281c8d4df03fde25cba855d5d54de20728bba04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sroto27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8d38ee8ee6fd9ae7ddfae12d1d4953ae3b6ce1c77572a32ad523134640e83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-buburayam30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c29fad4b6468d21e6ce8ff8ff616983c036b96e8f96d8bb4f5ad19d3c238eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-sambalado97-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cf13577b179cc437db3512d0ba7c2bdc1bca58686b0190022fe5fc093c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-moci33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31aec45719ebfe4453eaa011ff87fcd0ceecdc8c85590351f4ba0502e5a1e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...