MAL-2025-129023 Malicious code in ocha-dodol47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83218fd2d0d4e692291fe48b8c4e851a2ec9ac9940f2944e344d2702935d16ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126620 Malicious code in flaky_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3a38b4e09b83ddbfbe44fae5a4978913a80d8fcc775dc3c4b9d7648daa1052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130104 Malicious code in sexual_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852df0e4403e6cf0d9e41347b6c4628c1d7178f2a61e74f5bfe90e084c114fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131429 Malicious code in xaver-lapis12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2d5ddd69d535491d9e9964a1b3d207aa21a22b38667de8f9e1968ff6886cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126825 Malicious code in gita-gulai55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0fd29c1599b5c724b1935a2821f759394b53bcd685b0cf0eda32886e5f94ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-semur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67ed1492b4737142562001696e7617e37b3163fb515f6172b5394cdd6384381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lupis58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc6cfc6691f5a602c47265210a7c698e29e6ddba7a637a5605f0f630df0f20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e646ddc9f64ac783ad0d313df95415a8b08485c8206a143df1dee2d0678851f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0090bf15b9576d708fc52d7743ceaf3f4c5f17412d2ac517466c7b1d3d4fce58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-peyek25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81f8f107135176be77613c67a3166b1cf552ac70ae275d3d981cf1cb3bc65ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gaplek14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8456cdf21397204d896cf456da59eb8686326328db968077a5bbeb7598ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lutis62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43df807e7b313c005c3d1cf1cdf6270e807e58c1da85c8d5c5a40cf168e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d728f70ea6a6931f581754d4d5c3dfb2cfdf74989398e6c812797ef3803e737f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-serimuka83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ebac9ae7e5a2a9e350f044ba256cadda344ef0ebdd3d15ba41154ea3aed514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858ae85261184cf721a4e193f4368f81c7aa85bbd14a54d8507cb44e2b3bec49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cae90b8e933eb36a6472d7847c36f70f98d08704faf4b7f84e0645ca0452a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-esdoger57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd870f5af04f3e63f5ee85f6893bf2e098ba8ab94dd2f32c5671c042d0ec978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-teh14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa564eccc0e0fe73cf14cf933c6dd145e843986d17d86ceca575d7d2c1cabb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-telurtahu22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a2099afbf359a63666347f9213fc0081b5385685f2a94efddaa440d50b6783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-bakwan18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f919804f2a7510c1c782e03ec3c866d89621802cfe847aea9d69f41dd45fd117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...