MAL-2025-127654 Malicious code in jaja-ubi45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df8aef8cfd38c494a26a4b85db49fe658cf67f5a7999fd3ff7f150d3cd2781b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126427 Malicious code in fajar-sate74-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4912710e46aa6a2d24916f683a51cc92e2236d7d0fc356e4d799d82d8d9bb74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124946 Malicious code in andi-lupis30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f182af2c67ee1ceede94342252105560e78dd5bcd5f1df0e76aab29944036c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39772c15b9a85975266b7d5738d73c9447abd49695e5ed5574f64d22e0d7620f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-keraktelor56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b53b1770cf89560aebbb7d109aa99a30a70d87561f8dcac2343605ee1715d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f9c77420a2f56d78eb3e91f853d386347cd49a188f0c1aa05d1b087b2515fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-asinan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031087b2645ac795d8a28ec093e4bc261936a50c228529c8f509316392dd9368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lutis45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fcd109a9c19b6f190507504a2a201f5624d96c505d3c30f58c4957e1b4230a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ongol-ongol10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d7c5ea3b200dcc8f60c8206c82108a0e4c641177849e48e0347aade3296865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5d24afab3bbc682e2a24f17b145b1935683283168f955989e9bc6fbf39153b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tek18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c33c10fd41160151dfca956d1fb7329a4baf5edafeaf733f74de39429df3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-keripik91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f9767e8c9613eccfe598376da5d3c83552069c4ad8d273b085e702650e240b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-ikan36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f955dfbce21abda86f352dc974c21c9c9651663d5d940d7a6c04c82a6303c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35dfab96bb492317182b30fae769f46c45a10a279a2b79ceed1d9691a4df9c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ragi78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5e58a8930056ba7df46f2c97d2c2b2c80fadd49d7e0e2fb27b4d1c7adc9741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko48-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1ba9e5624c55a3ceed2261bd4f2f084f23a7a419790b9b07065cf43b7aa0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lodeh25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b14a22f581cbaea1d3f73b294c9e35e56410b4053de6c264df21572b863053a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130033 Malicious code in sari-ketan3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e920be5c567ebe5a49e8ae55a90ab4f476dc17a5f779bc5743b02ad9e158222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-otak-otak20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c101f006f56169ccc425c9dbcd5d1434e1a6b20ede2ca36e05290be7b3617dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rendang2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad0d15b8879edd1cc5df15e2bb6d2a4490edbbed0c7459a60899b218449ce88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...