MAL-2025-125656 Malicious code in cultural_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752931cdb958ac0a05582562cf3a5729dea2b1e65fb9d4fa82822820c77fabd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130508 Malicious code in technical_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be313b649876e6d30c1c96952a21356bcbcbf1a237205df4a77940f03360a74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-martabak43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8706b7814b0d218a87730c96e6ee076d63b1182de1b6d82ce25f1f11dfa7d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-bakwan57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93aeba46abd3ea572ed4c699d198184590192a89c1fdc31e1e851126e9230d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rojak71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e39c09e9785303d9f019e2791fafe0184e5664a5c13e9f6ee53ede602510421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-takokak99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d61ed2c081d7591e1e0769afefa5d57832836f3456e371698f2cf06f97921ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-soto64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93267bc2e30ebd2d109d060ef0ffec96f42664743cb2eefbc92d93ce4c793e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tahu90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd48ca5d497423e936511e4961035ef75e79d402063aa4a93cad469fa72422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-wajit21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcc69d4b93e862dbb47fcaa018ef82da4f2ea31b1d894bbb3982a488f609217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-ketan17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91761396903bb931de48917fdf68ca9c6490cd2df31d2c41bd321db65c0830e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lapis9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b225a284915df54baeba1d86fab4ce399dfc548e3e3566e0acac9827ca38ef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kue73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b162e5cdf4b19d5723ea5258ff23ff32525cdae1294168dfcc3e4b6db06f6d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312226913f7d3acb41f091029604e4b263f2138f27398c42a7930ef9dd427480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-peyek13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6144e91068e1af084c1b268602d4683e0fc328d31035d40710ebda49756e556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lodeh64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d43f5d17a7aad0c3c24bbdc3730ecce57dcb963276ad17ec09a8970edd13ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tempe94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9d3f80743da70a7b02365378f217f6abc4c73d63e6400d68730b06d0d03f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129081 Malicious code in ogi-getuk44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897e5841b0243dd03bc7d3209ac123e3c3c16ac047aa59a3ece865257dfe1fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124913 Malicious code in agus-tomat16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843b307524d7db1e976a96b39fc7af1d2e8a3581c79386ab24ba755c3a0a913f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131487 Malicious code in yanti-bubursumsum92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da2101f21c69bda8ee88f59da77cddf4037dc169b9c777e191e652b1567a919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130699 Malicious code in tuti-lepet82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaca39520e861256c1948c5d72d8cdf1695abf9e8c318dd044e202c402d7ccf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...