MAL-2025-126962 Malicious code in gross_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8d1040c529f54c2b457da10befcb87fb27b18526189f56f6894c8c24764f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5e96d34b9dcde1f0d355274d4b36242742c6275b21fc6629e343de9e93818d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-naget78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec912f019a741c32b18015bc24b76c88b9101c6fb10f830f8ba8ba1a058a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-gulai82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03c689f36fd5a34efe7f6bed28ec302d37df98156f6da778e76736bde210bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7028ba6fcbfb8c81b965e2711ac16c96036bda6b5777fe4944b09a0a4041563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ea17b26cd8e1251c2fc85420814961dff473c1655650e5a9668336fe9b560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lumpur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b80ad01b00d1bb2a4cdb70866ac7ac25c38c2713367926168ffbda25e78c1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c54504476fa980c9b006e4b371f25fe1a0ddd70046a98cf960b45ce658f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15471a0e08cc5cf70ef9580831c027637a87851d3a36b46757633a647d2c3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-getuk39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d244788c40b878366ba2b2a40fdac793a8f5fc841723f6a26d1afd987490c33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bakso98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21750c56391bdb936a485b5a5114ca584986066a91825106685773486369489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-gepuk39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79835f3ec27a87e4b73edac839951362c9f740ec215e7e25d04a22203a64f269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tapai63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61f295bd5fe242a0498bf0d472fe53117124142c48ff522d9f465ce3910896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b4e6bc12247ad9f563b6750d86c0a579ab37eaca1b6ab4589a05e514990e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kupat72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03579979988a5eb73300a3ea4e3e2c2d38465e761017ae8f835e5555d43d6340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ruwet70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2694d1b6cff4a9914e6e509e5616008cb87e0c2f658d34b4c2a02458710d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08d8132d46b97ed11110678e219a5be9add42b628bdc2ba2c421cc984347d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-teh48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0880c0854e4896e6877b78f36055ea694045dbd1cc891b1f0067eb142fc77f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-bakso40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a487625b37c494b4cf9bb92aad4833e1d819ef00ea45a62e598adea4b357b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-soto86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b80641a542e3fe3aabbc75751bd9d8276cc9f9bb3105c687c60bb16a044c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...