MAL-2025-134138 Malicious code in hendra-lapis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8e6b460b91d751a70065d61cf1279dd03f7e80e174734c5f13376bd95f662a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39e21d2ccb180c0f8f77c9e111ccfb4ea92c35167c530e40e334ed4a323eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tempe43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245aae56e0816c596599ad3d7857873e7588c5f91312d71bd4a0ed4381cd0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3551f8719de999463747749cd6eb8cb1777dd10b81c2c9c02bcb013f37f63a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-tongseng92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecb20a49992581a90182c446165c7a617c531374cbf6f459373aac77046b5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rujaksoto52-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b539bb2e9a873fa3b94278ccafd64dd5a6c82f9b099b92bf1bb1db76b5842db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d1e7f2027c2f46bcd3a94491355da1daf9bc4afab0d79f456a64bc5fcd6b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ab212fa59d4e16ed08027f1e8aa91473a7ecd50ba2731f0ef9c4b94749b755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20b88c29c19fc4e8c29029bae380c8d953a945cdd0f0ea99d797a2a28d20392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1c69dcf9c5871f1e417c9d18d325debcc8308672aafeca126a0863aa7fe4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kripik83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a5cfa90a950b01c6ab731982bf1d7120c41588d8572a9ae060bc3077cfa404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-getas50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf36fc7b2c9927fec3df66187f28db9c93148e728a4fc629280a14a56cc937f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76056375238c15cd2e104a57815c9f4caa7a2941ee74fdb1e2d217b6aa5a0025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-pecel89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b492859f4f72bcabb4c60a04f1cd60f97a2290733b710add9a72f9ecd81ae03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813706c2186c0651e5ea299c161ce688eeb43603464ae217a7684b3bd1456d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rawon56-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd85a5c233d16b47c2c5d48749b08c7e3a1762583a6bb82a552ef68d75e8a9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126187 Malicious code in erick-kolak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103e042184929e80dee0127fd908fed1b7dc752a80ce7d0020363b5e13de84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129320 Malicious code in patria-kupat60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24267b74c182fe6cbc935b767963cb7a363c5333ed8fc9f1a963a471b2f3945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131105 Malicious code in vina-papeda34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feb4679031eab26a1f05b19509ae0e90a638ec8bcb2c8754aba556005f7bc18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124847 Malicious code in adverse_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799189e403f929e96908d0804961507da782b4f289d93b0f27fbf6400e772bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...