MAL-2025-124898 Malicious code in agus-pisang84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9c51b3822530309f02d66a17b9261a687ab152f3ac048d9c61dee3197db2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129053 Malicious code in ocha-pisang37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78f1f359d52b325aec90654abe3292d9c5d19e535aaf824c203285be4523d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125944 Malicious code in dono-oncom3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1175e2c5c44c0f87f3f082f535e6a2b656443aa74df9d32973d69e474e40d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470c2fc8160e73373e5068564f22aa331cd53da6638f6976d8f19c08c9e4d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ba29a3f8a5f5bb6f67f7bacb0c0a3a4591de88fa8e768ba751d8b9ccd315c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mangut23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3579d98a1b0d8c2058258041bff8453507fe416560dfc53ba3b9084bf74adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-teh32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a808da90a4f4493ef8b292550eb7f4c61e78518a054480813ba94c2421bda12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b561d604696c7e5c34488fbda9f31764cb476847d8c253b56644b6e2b16d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-pecel33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a7b7aa6bd2319822cf7e9863145d3d3fc49d1668f7b8c94ae331814e2ab8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-jus93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a3c7f02725b3fb96d10d83b34c0012a1c54131a1d19c3d964a15abda9ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tongseng56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387d6499f6f5a88f3bccc57b4e185dbade3c6a58013ef3e8bc452df48e85d775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ubi94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d768de661d590863503f8b02953435f9f5dbfaf8b03b9075cb9871ecdf342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ketan89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a69662e76ab568de585e5ea0fdedc11ceb83196522abc014276703e4a67d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-getuk24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eeb15263e1cb0eac0eae2f310c66a3f2d8fa56b7fd2ace5386d082143d84033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-tempe24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640cc2e721e81c764074e140a2ca08bbf416a0b3441d7835a4e5bab6fd82b017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-sate80-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c604cc4d1c93b35be710158d10a7982c7443c1f965f4b4ca8ca9977ff669d300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121aea9744217027ab909357183138b1fa54722169086774e9a890b34c0d9a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c970b9097b7e781f9a080580d02274dc9edaedf76f1d6ada9deb74d1f7f2628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b138431fe268b4e04dbeee4996e956f165b6113d8a50799cb9a9a60ae56684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sambalado27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f2d6b0187eded169096712dd0f3e06f7ffcd0636b416ee32b359bac35daf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...