MAL-2025-128421 Malicious code in magic_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1306a967675bd3395f2da5615995de5ed3eef4f67baf40254f71af22a9fc011e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131044 Malicious code in vida-rangginang61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90982f0e259cb1fe3257421358e7e5339838c692f009dff90c3f50e358e2a6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127994 Malicious code in kurnia-kue84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e260c088eee2165e3e0e371f2ec36d958956f1b1f45904fd1aad536174628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125207 Malicious code in blank_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e003137faa2ea7a1d5a3d1fcea6e24fb7f4b835d2adf2b1297af5c991b0303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125964 Malicious code in dono-telurtahu58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28361b0ccca599058adf50404e86ee112860a0840593a2ea307333f0c1b00f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130138 Malicious code in single_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f3738328358c9dbbc04f7f701bc44d03b5d8f88fa1e1655ed92f9ed9cee6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127697 Malicious code in joko-kentang37-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7d746f5f6e7dfc67ab742273584e5dd99eb8cd9a875fd012e6800b50aa099d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58cf85d1709642d207612cd801bfe7fd72c5e616a5b9c3e64ae900724a28d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-klanting17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d915ccff06465abdea35336964d1e0c36bac0cfa74a2c01d74172389384d507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0912d659ca24ee91cec2c9d9e2addf2cab4c0c9183ee03a2eed2e21d47c8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ubi82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27fa945b684b4d79fcbe7eb78a03f7a766d9f58957323ba29c904dc933e5265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gudeg19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6067b41b9370135b1828a64b12f2882744ba17b4adac71c6bb811b1becaf4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129739 Malicious code in residential_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b37653c8bb3ffac6f3cfee1eae1abed7316c6bb2b32095871cceda7533b15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-ongol-ongol50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745fd1f606d7f885eee4de7cf86765b92387018c6a86b822c9ea55d60e312d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketan96-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8feb0f2fa41ea574ecb6439854906d351285a46191867b7f733f8cfe62f1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rangi42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c792cae630aef3b2f17d5636fa1e8cc9e0711e19fe7a7d756503708cb24cef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124920 Malicious code in allied_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa86a7402d3c857f77c5568d3c01064879aaf2ba242d8b8e2ca1f028a31c6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125254 Malicious code in budi-nasi95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca40db78f200236959196be55f4e74fdf4c32fe75e5f24d76143565281ce817d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125457 Malicious code in cindy-soto66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb104e060dd86d07d37dc9fc8d0effb8330f01ce6e74aa897c14ce35b0d5e217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129532 Malicious code in putri-getas62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec398d99a871dcb3bb99cf6d9693cb13d50508150983557b39805bedfc7e8005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...