MAL-2025-126970 Malicious code in grumpy_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fff95e30f6fc71bbd2b987929996c78147cbed41690f24e9005e6bbda126d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129455 Malicious code in putra-asinan32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75dcbba029a28cfdf53c4353a4cf9edb5de181be6a91db6e5ced4560342aae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124799 Malicious code in ade-jus80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9891754c8509e8e93a079abf28581c47c4a565d80c043c28c002a33480efcb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128911 Malicious code in nina-keripik72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c4d14c8b70ebce411dff6ab5616a906eb8775ec665faf03ef8057953fc032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125035 Malicious code in associated_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd318dfdafd83e958739bc9e4076e167e1b62965acc2206a78e3eed7fdd959f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124899 Malicious code in agus-rangi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96887d872a54b0c7c39248f2f3757eed4f08b24973a72e7dc8918c67c600670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125605 Malicious code in constitutional_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf2bd61a0c1675e212fe8dd8fa06eb4fdfdb754d96a7ed7d019fd10cb52d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-empal72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093c50b5cad46bdd102e47252d9bd2743e4788ef27cfbf8ebfe7e96850655c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kupat82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff27368eb37f12a6f37808bbb281857f5b91b4adf061cd2f0a82a53f1c5d4c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-rangginang42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d235fe2409baca0f8b808e3dd542f2078b31de817a02a1c48f9225dde8d5fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-keraktelor98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecdd5a2627eb92ef589e88ef15e5362dc3a93a2ef3320242305c419eef17538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-ronde5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f000b46eca37e400b25abfe98023d5a887e6dae53b8435b971b77d02ff57c6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mie30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfc98c5e8e814b3300abb3527d33ee5e064ea30e3108516bcea573c73c896bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-keraktelor56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b53b1770cf89560aebbb7d109aa99a30a70d87561f8dcac2343605ee1715d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39e21d2ccb180c0f8f77c9e111ccfb4ea92c35167c530e40e334ed4a323eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-keripik53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd209422e69a8b5c244eeed2ad8e91d58f91923de8bae3f5f1a86b37365df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedf23db439aa2ac619391c0a1fd96b0160112f4af6962a345b182513a1474df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1bc70e4fe11a3bea824d98aa279bcbaf4ae7c5aee4e2ca75517113cfcf4405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lodeh86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def2846b67cf6c436541208ccae5cce2744dc3c73f76c65d4501f6f197bf8c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...