MAL-2025-127763 Malicious code in joko-serabi36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565ea76744fa72354180246bdb570e9d3c6e11b9a7e9f859bd74d237cdc5177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129735 Malicious code in required_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a99a732e71edc4339a3c31314a82283c5db203b0f2a9e2183cc8f019947b1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126919 Malicious code in gita-teh96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e340390ec39589ef6d6e4f4b829bdac4d080d87764230b436ccd323947f11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-tempe67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5b514740ddda6122270d4531bea4b1d646e4bdb9f42efc6469142f69d0e0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kembang33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68dc96daa16489bec4b1cd704813ff607cfc955c5dea956e7612feb31dbb7ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-rangginang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bbd23296dbb468afb66ad9f7f6b0ebd2da0ad00929064d61bb9d57af019755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-empal68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33cddd1ce7926b88f41c7cdfc328bbcb8c5e86577686709583f2d5b89ad8e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0912d659ca24ee91cec2c9d9e2addf2cab4c0c9183ee03a2eed2e21d47c8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6b6f47ea3a10fd1323629295e0c4b836ae114dff350198e4645bfbfbc3ab54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-tempe74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea57332ba8cbdc3881fd02133e85c10dcd8ad8030829867c0cef4d613c1f10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242981c78170a184e3e8e53168053d8e34239670829d6181bdd7ae563cb3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ba29a3f8a5f5bb6f67f7bacb0c0a3a4591de88fa8e768ba751d8b9ccd315c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478f85a33db1e0c2647e43935914a7d856611463719ec5e720524e85125bb5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-dradag28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc721949fbc6065565587dae2c56e637a54597730af240c469eb2d4278cdbd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2222a4adcd44a507760f30c8f4e821e480c7054940fdc4af1369b2bd47f33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ikan13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07faa020bf8fc3854275b1b5a288f376a2aa9625dc35d6dfc7721f085e99f8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kembang27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4cc3f654b5d89e7fc230b8dc6b1ee771685b211d83f3e3025fd8c6c62c42eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tiwul50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8987cc97caac9a10dd1d64b5ae66b760526a6935a4e65524d97b326cf7e859f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fb6ffa9f39b39b894098cc9799efcdee661381bee11614f8409ee924eea8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750fd3ebd1f1a04154ab35de6ad7808075d558b9792d034037faef9cf95464b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...