MAL-2025-129488 Malicious code in putra-nasi1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e399463cb5fe40015915242afc9c7249ee506bde8d85d5475ed3554bdac0c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128295 Malicious code in lisa-martabak87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c10c51c5f5b22074018a2df2d056e3baf4eb98b3e7746f92b8668d6adcc2bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130157 Malicious code in sinta-kripik84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6f3e08a69669dca2ccde01aa40359359f3f45178742eafc4971a50a49ae282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fff30615237ef79b630706b6be4f27ebbe223a79045f0fb64ab83310ce28cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ongol-ongol75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6096d3de2f873748ddf9821b10c21cd16256fc89d84dc8ed8161f882b861719c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jamblang42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6dd271d58f6d63484e519bc08cf56cb9f1c1864595d0f2c92745065e182bb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tempe2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f49ee29130f9baab02c938d6acbb705bfe89ae5b3d046b58b121884ddb1162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-teh48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0880c0854e4896e6877b78f36055ea694045dbd1cc891b1f0067eb142fc77f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b4e6bc12247ad9f563b6750d86c0a579ab37eaca1b6ab4589a05e514990e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-getuk39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d244788c40b878366ba2b2a40fdac793a8f5fc841723f6a26d1afd987490c33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tapai63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61f295bd5fe242a0498bf0d472fe53117124142c48ff522d9f465ce3910896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mangut12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97312a982f346eccf3582dbe393d536d48e99641a1ea58bba10ea766a8d80539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ketoprak80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9ad8c0a765a3ff8f0477f87a1b0c1c819c99aad521a0b221d03f5e296f3965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65db4e5d1be05c6b8975bbfdda9120c05938477fdcfad19ce2e9ca667ecdb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-klipo50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c789c34648c2ade9419da450776c0e8994abe50eeec3ba7284ea810ba42420ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ikan96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3119c4fddd0526b78dce84d998898da6ef498d7e26e3721f681adb8663a5081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lumpur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b80ad01b00d1bb2a4cdb70866ac7ac25c38c2713367926168ffbda25e78c1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15471a0e08cc5cf70ef9580831c027637a87851d3a36b46757633a647d2c3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadd6474ef1b6be9d87fa14847a509944ac530cfe6c58c8a6804e979593174a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...