MAL-2025-136836 Malicious code in sari-ketan11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90203dbeb0d4a996cd727247d4ccf446bdc098646e525f6db6053774a87a1355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-toge98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd136642f82303fcfabfb86a4c23cbce9108ada8a81ff0f6ffab5c6a89a576f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-rangi75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9df436688374cb43afc6227eaa4be33cce45f1eeeb8c721785b9fc24b4bb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1e239edb7327f9fc8bb3638a98c60be7a8ec1e90bcc424beb8171a555467e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-martabak83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5be2d36a7b2e4d0dc94e1afff0056cad56e3fda6d48384c643492bcfb851095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in general_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cd82433f3d9c39de168c9d48ad5b45a8b5efa77ce081307ecc379bdd05720f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kue55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eb7ac6e028c4635f645140e570d558ca294637ab36a8241e1ec82ff261601d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6f792fe90d6b7d530f569834cc591137a053457aefa86f384713d4334f550f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lapis70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600df89ffac4b6348b727f4dc472a536c4d5d2f4c590c58372a76618a72ed4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9112205e8043503a0009b77b50d0cb4a7efa5835a271c56e79dc9dae4eb27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad275c79bd6560707140abb2d9f473e5cd1f310d96b9fd21ddfc51cd583c5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tek2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1098417f3dedf19de71859bfd8bb1fed267fd1700af37da226f5aa2964d5c546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22841b8ed42e115e633fafc52c896922c48202ded7583ac38f2e2db3a2c67126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5496bf2876fce4e3068cd7040b99bbd863ef294e74ff27a04adc3298022383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88720385246b1a71756b9287c5cab7abd70fd2fde41770b09eda3e613ca1180c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kolak58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd35f7427d79c98cf85636ed0ec3c2b0207fa7d85fd14d06e44fa27452760c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-serabi16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11044a7ad0440495d86db266150a34cd2ec8f3e065bb615cc8e3e02b08a80a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a26ddc2eee3cc1c4011cbdba5f067ce56ee0fd40d95c6d05048744a52027b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tahu71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ee6a268fb284f58fcf78bbc91a84b14e4a6b764bd7246212f6d5057f8c108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55523d3497c0d94980a0fd2df539307085813790d269fc2b352d8cbcc2d3a6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...