MAL-2025-130099 Malicious code in senior_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88128e362a8ea9f631857ade319d738f9adee7766bcc92aa44f95d27f11517d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125027 Malicious code in arif-soto64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93267bc2e30ebd2d109d060ef0ffec96f42664743cb2eefbc92d93ce4c793e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127975 Malicious code in kresna-telurtahu74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606b1568e93e850f8bb02ef6c931612f80cb2de820f065d05b2235b116e111a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7193dd69db5befcd10280a402555b97a7464f73029cbb8ed80b096dfe8ebc345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fe94aa1ae5224069292366d2adf12111184a4e81c96a8cf24749cd11fcdae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-jamblang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39ac3bae5e50654228c3d2d061b518fbc3a000f9e833c296b623a717fae9d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-enting76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3151e4e4a4a172f598029804d37e55dd23eb6ae12084f5469c54ecc99d42db1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-getuk44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897e5841b0243dd03bc7d3209ac123e3c3c16ac047aa59a3ece865257dfe1fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58147ed652a204474bf1fe8938c15607fa07b7551fb836b12697a9fa1677e3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b62841dcb8ea99f25d82ef06f81cd5ae3c318132e833be2174db6321ea4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7a3166da8e657edf572f7303a231255aca292a8387327219c7ac5dd9c275d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rangi18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95f878dc1c538d715d6c1afc03769149d1da77b8e2220201faf43fc9c96539a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b0e4ad0af57d5d6f570e443db2efd6625747e974c9f89a01534335dca395b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-klipo47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1e9c58b3cf2ffaf015327e7e9ba3ebe3789b24c48f1d9fc46301edc3b2f395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e148c69fe7854d94bfd1ec54156b6f0ba90504cbbdb9f7d9c4f847921cfac1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rendang24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae714267adadd0e7d378f2a0048a38f2cae6fdaa6ad80687fce0287f03077c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa03e31f7d5c4b684df82d93ff019b4af52caacc7c911fa1621e9dce848f3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lepet82-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58c999e519bd48b289d851f358d1e050bb4bd4f86bcf5aa73fc8af056663f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tempe3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a9ebcfad8637cd8adff424ccc05493330248e9cb5bd19422357e2599a24b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4bc5f20460fc332b96f5caa7eded4aefff81540ea8cab5977011fecea60aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...