MAL-2025-93046 Malicious code in zul-semur94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1ae7cf01db1c58310c714cb7d81aba0dec2b79e6aacc993bfc6461135b6cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84828 Malicious code in economic_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f378bd70306d8aef9ad634d7e1f36d18e9ebac2ed835e59f729a2e4dd76833df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85993 Malicious code in gita-martabak64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1b13034c1f6f9fc991f24252ab1795b152ca5e0e37c65753ffc7ec01ff339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92776 Malicious code in zain-jamblang56-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3902d665bb46256c0cd2cc564a8c46b9b47f192507cd6c22c7dac22454767f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85811 Malicious code in gastric_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db92cbf47c1033ca88d47de5f4bb8b69a65b178c223ff7d36d301c5442fa43cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambalado47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4164e6dafc161ddc05945cfe9a5cfe5d7c8bf227b53d872cc76fcc651d3cb4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-getas78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93957c0e4302d51680493b8f900cc435e56435826bc0cb5bf48a9f765159fd37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mie93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7440245d50e76a861fd1bc9446eeba906566f6fd807d598c5681db8cb83f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rawon2-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892535a376e6dce103d8c40ff20b6b783e4234848dee09e177c7f44ada8495a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-naget100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f455591821141561192ee16bf8d95612677e094ea758913e67b7ffdb6a8f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-rangi31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9db58dc2489ed0bed4afb35c57956bbe12829886c79f5201aeae3c9d876d38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31b912a18b11d880a2d975f1ef23830f04f6bfa3e1e2cbe9e298a29e7b1d144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84075 Malicious code in citra-esdoger19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51065d2ee3802ef7f4b5fb0e5bb53e314bcdb888fa84b8c9d3e69643eb2b6371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86493 Malicious code in human_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a807dd6d7381903d6e2730b3db545e317d5c6d097da1facf2d1954968f09bce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86974 Malicious code in jaja-lontong36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605775825dc4ddec46f7f4924073aca6083dbdb1ca4ba5faaed88cee5609d32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-jengkol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd06fc7823966ec82fdcd277a7d0013023de70fc1ab3ca3ee4d06aecdcbf124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4739dc61ed5706c4e7dfb7847f5676a7c66185455149c37fa06bc97c02b9b437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sambel36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00855837dda4b3a9ede9f260aa28a011a1092f28dcc1745539c58c7b5d161a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patient_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f390507bbd615e5f785ac8d1e5ad99c8e0345d5ada33a8ff8e75a24f8a12332f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-kupat18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcc5657fb534831bc6a9f91fb5db29d238e728d07af14b4b4f0cb8a33976397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...