MAL-2025-128905 Malicious code in nina-brengkes26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1552281f0ed78f83ae4ae793a193bc1288cbe3e5546732250fcf7913fe282c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127215 Malicious code in hendra-tempe7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e14a2ff70fa2b6fb50e8b752d88959277b739d9b4ece7c6a7632aedaaaf15d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko48-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1ba9e5624c55a3ceed2261bd4f2f084f23a7a419790b9b07065cf43b7aa0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sate21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513f4e69187129eb5decbb3e5dad1c2a59a231b195dbc9960acbfd07462a5a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-saguer46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe3b79ea30be29fdfd8c4363d252d4c4a3f5fca35dd3da32a8d8e0f7734e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-otak-otak20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c101f006f56169ccc425c9dbcd5d1434e1a6b20ede2ca36e05290be7b3617dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tempe50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a0b6527aab05ccbc207774d7c8cb54aef27f6cb2a2fb0f25e45edb0fb9e5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85faa5c08b32c7a49ee67a361530253ee83887bd444d029345f2132fec41eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3057a86fcc327c745f053bbd5a0b8d31180f404040ff1e3885152798df0291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gembus74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9b7dab38eaa90ee1e3e6cad7757fa01f5434eb3bad9d1e80a110e68264989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-ikan100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac3448513bb09e5fd9b7f847082c06a6c4cfbdd58b45b24345c35e4c8ccdafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-asinan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031087b2645ac795d8a28ec093e4bc261936a50c228529c8f509316392dd9368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lutis45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fcd109a9c19b6f190507504a2a201f5624d96c505d3c30f58c4957e1b4230a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5d24afab3bbc682e2a24f17b145b1935683283168f955989e9bc6fbf39153b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35dfab96bb492317182b30fae769f46c45a10a279a2b79ceed1d9691a4df9c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-brengkes84-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f8bd529593a4b1f6981876b4c5d086fed92a0c005f27e8ac62c51b03ace12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2728d77694ffd15faa75f3857d9687e81206bb8f7f3e2b1a2afbf0f0ac7d6e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53feddb0571c22a3c9674f1c0d8a7a6b5a7333ee54d2db24f63d6db0cfd2ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasi87-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37be33430fd5f722807227db4f81bd59c1296d50fdb8a3d4b8c4330fcdd8191c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-martabak39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb7c79b30bd601ae3aef8d4855e82d460495118c7b792ffd6327e9512c705e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...