MAL-2025-138372 Malicious code in yuni-rujaksoto87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea801f1cef22d5682336317491fcd1e988386bc0c50e2b95cc2c986dcd40f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-taiwan38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442967e59c128b76736a8cbc61558a88e75b5fdd0c7a6104b5eb337ca276f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-keripik92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692f1c36f3e7f8b816ee9b4352153e54a341e8e3d19d07dec8d3407ece94a407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bec5ab7fe4287e00b1f09e7569d3bb0844058048699bf5f2c9d085310792ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kacang76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e1998ea853423761a4192fb1821085c48deac82a29661b7e3ac5105d897694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a883ea3aa8c280522c66910145f6b5044a37ee2ba8cc0af5e10279ac2be5295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getuk10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d85591aac8b00bbc9fca368bdd47ff2843a9e2207de68f0793b3595e033c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b84cdcc6baa9e060cb679992aff62bb08a733268915e2fd142f7d4b7f72529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ec26812f3a1a4521f285309c3daa3a6334b47e52c6eea5739f8a31727adef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tempe71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f30da67452715f0c42a6577bf07e083aa2bf15fbc1b9efe0e56e2851b427881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a26ddc2eee3cc1c4011cbdba5f067ce56ee0fd40d95c6d05048744a52027b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-rawon33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab470c259305a77ce01bf53327182b991ba5a346eba1ff696974f0eab801046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sambel97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d137bce68bb61f8a4c5cec46648cdc6f0794b6a5225d2ea6977dd72bcfd180a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a02358285d09bc1810a0a0611519a4a95e4f5e5472cfd8507f5d75c87e899e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-saguer64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca6e58429d9296565b99c2591b98e2e483c210ab94cc2992bbb431904304e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gandul76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b1a5068b3214cb2dc857f35fc5920e734e0d0c5ca98ddb55d03a52f07b8222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9112205e8043503a0009b77b50d0cb4a7efa5835a271c56e79dc9dae4eb27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126677 Malicious code in galih-lengko64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807db916c58ad9967991ed475c188c616daa5c974e38e56f8ceac61a98ea931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131347 Malicious code in wibowo-oncom86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e570addb37f5816c8958a978db2c3a4c9d592627f6355d3445d2ce8b318c70d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130362 Malicious code in successive_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3c12919e144d23c29b16c38c2e9019e9fdcae0465f15eaa5ff1a4b55af4d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...