MAL-2025-125432 Malicious code in cindy-klipo49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bb811368f2542c8b7d04f30d21eb189fff30263cd70f3ebfab570ca1c350cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128564 Malicious code in marxist_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18c7ff25f8512e37145806e24acf71400880842661270c86ddb00208d125f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128657 Malicious code in miserable_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43edbd145ec1499dec3bcbcb9234b2c38098e35f6ff45ebc013619cd2e51644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125549 Malicious code in cold_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7042e2eb9c430dbbd6c0dfbc0b5e010927f6895333cbc4ff179823515a1ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-serimuka81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1229a091614156443628abce0a15fc42c972b85ba5a64f47829f195292c3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tumis98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f591cc2dfe470c0dbe7e93f6fc46a73b2cc320e0c3ebbd732339f107a83ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-toge40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24376d126356fb35864bc24996e4589cfc216a0d93a76dc39b60ab557e0323d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c098e104dd2b325b8e93bd4ac9fa8de1092eb78fa8d5af29a108271e570834a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-serabi27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be9ec0e7e1c754f05701b42c0617ca0da54a9a25c2a456cb3b7e343b3f80bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a56380680074c4259790d532ef4f670b60de5d7084fa2422208079f83a4ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92203e96c9332bab7bdd937a65e6e5ff8df497b720830a4c992bf717845dc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-klentik71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61248bc0e04604f20a8eaae2ee8f9aa0c0d903b3a9321bd3ecdae6d2352bd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-toge81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a10ad749815889b5fd3fbb443166a4d3f7c3678ac24066a3fb7e6ccd1236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-getuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cff5fe1d593325097a7cd26a9deeecf235d6e7890a43e892ff0f3bd21541efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kupat59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6d5c087351c598ba1635b624a10dca87fb6ff8a6bd4521954fd5ad835e1253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-rangginang33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2adc3ef6378e0b1bfec323375e0951743d53efef03a44d9028c1a790d61dd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501454f95fd14e1a88c264b1b68ac0fc16ba6b45b01d874ae6c9c65fe79bf382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-takokak23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e69ceab3568e7a0c4fc03d784bdb6829135d72cd844d9354714003dc3d0bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131474 Malicious code in yanti-bakwan1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4c689b078fdf4ad559f22ded79a5cceb79d94f4c4717bf44cc7f4951274e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...