MAL-2025-125890 Malicious code in direct_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca49ada2880385418fe33c472c64d75c7237f4717896136b787aa8a79a24fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128848 Malicious code in nana-ongol-ongol78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3ca0c9b6fcc21a67aa10c92002a0855d1b71092500cec65ccd1a3ab9bc7d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125432 Malicious code in cindy-klipo49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bb811368f2542c8b7d04f30d21eb189fff30263cd70f3ebfab570ca1c350cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128564 Malicious code in marxist_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18c7ff25f8512e37145806e24acf71400880842661270c86ddb00208d125f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-serimuka81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1229a091614156443628abce0a15fc42c972b85ba5a64f47829f195292c3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-rangginang33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2adc3ef6378e0b1bfec323375e0951743d53efef03a44d9028c1a790d61dd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501454f95fd14e1a88c264b1b68ac0fc16ba6b45b01d874ae6c9c65fe79bf382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tumis98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f591cc2dfe470c0dbe7e93f6fc46a73b2cc320e0c3ebbd732339f107a83ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-toge40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24376d126356fb35864bc24996e4589cfc216a0d93a76dc39b60ab557e0323d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92203e96c9332bab7bdd937a65e6e5ff8df497b720830a4c992bf717845dc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c098e104dd2b325b8e93bd4ac9fa8de1092eb78fa8d5af29a108271e570834a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-takokak23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e69ceab3568e7a0c4fc03d784bdb6829135d72cd844d9354714003dc3d0bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-serabi27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be9ec0e7e1c754f05701b42c0617ca0da54a9a25c2a456cb3b7e343b3f80bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a56380680074c4259790d532ef4f670b60de5d7084fa2422208079f83a4ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131474 Malicious code in yanti-bakwan1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4c689b078fdf4ad559f22ded79a5cceb79d94f4c4717bf44cc7f4951274e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127725 Malicious code in joko-mieayam95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b28cdb2c7e3169fb283ca3decc5bb782ef4a753b7daa0541eea3e24d1434bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129779 Malicious code in riana-nasisayur39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6663ff4f12b505af4f4e8fa689ccd2cb05dc7e90af6dfa8b7fe1bdeec869ef19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-klentik71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61248bc0e04604f20a8eaae2ee8f9aa0c0d903b3a9321bd3ecdae6d2352bd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-toge81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a10ad749815889b5fd3fbb443166a4d3f7c3678ac24066a3fb7e6ccd1236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...