MAL-2025-125569 Malicious code in communist_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcae3c8b0e4411a3993138dc088ceca25b142cde2e5c8acbb708289c040a66ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124886 Malicious code in agus-mangga91-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eed91d7e6696f4d1ba7e74cd3d99478e617dd29997ff65a8178e67f33d2300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127581 Malicious code in jaja-bubursumsum68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913092b1f2f2ca418485edfff1143cded145fafb42c2346d470998f5a9d75809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129428 Malicious code in prominent_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3766188d488230718d294859cb54bf8efcf14c80df2a32f67a3bd2acf3e4e778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130151 Malicious code in sinta-kentang95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70e1fd5a3bf97d8f6e5f9430455a25a2a7bd2d1153d6c8f2af823d2775a9626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126613 Malicious code in fitri-tapai69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83320f3b53cc77109c42aea3205f866bed1a5eca1248d1caad4e6ffa5f9b2f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127154 Malicious code in heavy_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3519075b49c5bc5752604e1e84f004eebe069586575e0e60e8b62cc56bdd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-papeda99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98650758099547bcb4ed1a783a96e833052ddbad3d0b317c3aec1e1b647754e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-rujaksoto74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bad20a9640099144042aa58b89583bb3b77b9db9d473f89451ca41cf49a387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d4f9d379d9b452e5a6db7039743a8ec892bf898a78d30631fa042df4f9b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab86c620b40cd435935ae10f633be344ac6a329e21589a362abeb681fd2a103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-jamblang72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4e5967c768df70cc612852a768e00de92d6035a4b46e9001314adc0afb6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9094771c6179f61b12c5245092b8d1cc8bc8cde565fe4d5d6c6954f65648474d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kupang25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b567e13eb8627d4f7558ff7529133e1d6c01d38027ee9c027c176676367dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-rujak84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7735f292b505bbf7ebf872df3cfe92006dc6f9b01ecd9baa87ce81ad34bb9ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-wajit71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6742f2f4b3131eb83634739f4cd1432df43451471e3a1ef1ce4fedb48bbf1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ragi29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa2205f216880483e731bbd93468c30a67aa1e329f7a0b1c228d276888fc378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jamblang90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd6b69b8b01e87bcf7b25e41ccec845450897218bd2887f4e5109110e96abf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sego92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d01aded1f290f96fa4518a1b727aa34372353e8a1ec8ffe2bfdf38acc735eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da25ffed5a01e4f211ded4d18eb7c1c1a0a058c4b18fd3e91a560a874a5939f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...