MAL-2025-126120 Malicious code in eko-serabi95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32d4ec762d0b640369c4c291f8ff617013d413c1a1e2aa1b0bf92bbc90dd02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127285 Malicious code in ida-kue93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad5386bc308bee0574255094498067b61db583a9ea9ff5a6cdc37b40cbcf21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130556 Malicious code in tiara-kue33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7028ba6fcbfb8c81b965e2711ac16c96036bda6b5777fe4944b09a0a4041563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127481 Malicious code in irma-nasiuduk66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef7d155fd6f15662d3706859599d844cc6f71cfa8a54bf58ba09ddaaa908441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130858 Malicious code in unfair_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5496bf2876fce4e3068cd7040b99bbd863ef294e74ff27a04adc3298022383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126258 Malicious code in erwin-martabak48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66b80dc5a692f4133f351bd4b142a115d12fb6f24f0794553b08f9566aaa16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8541cd0b42c8ac4f173be22135fffc3578168f72db3e74fbe7f681127fd29b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9998f0bff931edb22220bc1dc242bb224bf5072af9cefe784dc921922ff3c037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-dodol22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba5f368f3cbfbe4d6fdf21a30820ff55cb1569c96d2a7dc7ee30d9d0400e180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-papeda31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1c63cd33780dff1ec780bf984bc2088eb7d14fc14d5e4b5aaeaf0a9a98251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lengko31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8069bd91cc37e859b742fe5d2e2d778bf764ef377e0d5b058428649d1b3baca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-menjes66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d61004cbe3325d17d97e46fc218faafb36f4aa611cb7298f4a3d35603be3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kacang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f61bf5b066b679a67fd8fef4619da9169fdbab519b44faa432c611273b2e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gembus54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490fda467215212ed779337cdf5682e8dc85646a1ba284c9b13550cf30650e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-pecel52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c812a26ba98aa75a48aac14fc901df2d64afc8b91a05527f283d7f320e1c30b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tomat98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3127292cd35a7c93b4a10139e3704022b936e5c2cb3ee0ec339731d4e5c6fef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ronde32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a1911f267ae2ca775ca04b916dd9a43f4cda54748e19823792b3c5af9f56a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3144662233669803329715234d6be8e0b0e240a82b8df9e125c1a71d3a721119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd49637b83f87c500e5099c1f76e100af3d5193b9402b94d9a405ae85ca1a71c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-keripik46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f12d26fe37bb3d6acaeec06cf93f4ec3b0a78789379317781c69b1c3e23fe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...