MAL-2025-131146 Malicious code in wasteful_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c06f3ec44dcc95843803b46f2dd6616b6daa319d1bc94c85293f0982687f0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129093 Malicious code in ogi-kentang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041808616be661d9de303792023fdae222d9f35f160155e836f84a30472d111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130598 Malicious code in tight_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4525b4a78da44774f77f0ae265fb1b0c43de2caf80474cca812bdd8c2d54da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127116 Malicious code in hanafi-naget23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f534bb35bdbd34a6f07f74422950a08276fa3ff6bd5b54f93a11bda0682fb1f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-bakwan47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f0d4c5eca1a9ed8897f03deeb22c2a5a93fda698b25ed971006c71ea35f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18602e2ea5f3a9bb43c32923425560916df22a3b4ed0ca93072ca316c32df924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242981c78170a184e3e8e53168053d8e34239670829d6181bdd7ae563cb3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-peyek74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a48b92ad50f7f1a172e2906c2b769b232316b39b802d9af43aaa165d297f7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rendang8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3faa817671d5563f618fe4bffc45092df4cf9f4c2c78beaad6f5abc0f3df793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ragi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc1359ef800e336448e3a24fbe716047e87e369883f7180b6e54fa173b76843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d6fb53af959f8eb8112c494b5d1f477df99a44b01e53d719f9c95187a5c4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-teh43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deedad8e1b90064d0ca072427947c96f1b35f96352c561e946d97634d7fc42fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-mieayam97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda0afeeaea2dd663b655d20cc58dc6c539a78299f5cfdc0ad00202aa9a1df13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6dd4505d1c1d8b019376fab8e72b71f4ec2dbde74760b2c306628ef4f99eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-taiwan48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadb5e4d6360c99560eb5a514f816b95d6347c78495e31f403a67c603954d8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131197 Malicious code in wati-semur39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d8aaf367fb62f07f929bc416ef7e9f797064492cd45b08ce54df4c5cad948b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130674 Malicious code in tragic_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026d309a1d98a500980a8ea19df1429df4b17160a9d656e1311db1b836bb03ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127996 Malicious code in kurnia-lengko83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e860fc80b2367e240f711fbf2f9c6f54c07b55630f42c30a9e76a4e75d76364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131514 Malicious code in yanti-keripik60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6be8596cb339aa53b64c48758eb87c983b4b87db827c782574ddd5930a82f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-bakwan68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec2b23d4e2ed439eb5f20ff82fef7f891e085e2cdd4ff8f5c4f7a941916ea66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...