MAL-2025-125888 Malicious code in diplomatic_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b856121e8c1321f6c60990b71e519ceabf4445b4f630ceda7c5049e6d73323a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124957 Malicious code in andi-rangginang45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a978b1d0f4ca486a5dd06fa88f1c84d185fff03f54e02a8a80a595de035182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124884 Malicious code in agus-lodeh61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372120295b5cc84d1c4be52c38cd324d6ff2bb90f506c70efc274cbe35d643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loose_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03971c914b9c10fc568d9d0164eca390e5e53b8908ee4194df7e637197d01a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-serabi82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bdf4a16c2bafc4c8b44f16e0aeaaefc616932d6c76ec49409fd2b6d58b5113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc51fc3b0197e4288a5f18852c855be3e5c29dd002e28dc27f3272d98b867b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129447 Malicious code in psychiatric_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a1fc5a2cd9af2b03a3bf1c193e900cb4e4f0d15b034970ce7d09c79e7e1960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-mangut79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e7b9a5683aeaa389f8047e2d2845efd47b3a105875b18f7cd834b83f18db0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kepok91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55074601a1b0aceeccc051096ef7c586b3ca1b6993c35cabf44ed58af49c9608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gandul17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8e5f407104420d7bd3b63b1e5ee82e2b1d71c3300019a5fcda3dc66996de2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kripik48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d1e91ec0ab6a4820c41365197e74498c5dfc3693e91bc47f1b64296385b02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-bubur48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338ecbe5103acef534d22bda4d056e302a38d60b6414f246a45fe87dbbd89125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mie68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710e296a03af112abd6e11af2feaf6fc78b35e11e558a3745766d9d729689a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-nasi4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf3e511d43727d4b68eba321c77028a41774eb56dc1c6d0c0697940b70b72cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04954c3bbfd6a0a3261c1a2550b245a1fb31a9582aaf6ce8e75d92ed5053c7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-keraktelor47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89bb3b597cb1e682fdfaa5fd8fa2111dd7b7f6473a5f09bec92c3e3e01c8b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kepok52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322d1a497a532c405d6a6ef80debe7a828efb311f527842cb46f4d72c974f63c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d4f9d379d9b452e5a6db7039743a8ec892bf898a78d30631fa042df4f9b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6269b90dd9646d4570e3a0c939980acc4a0137e0dbb89477ac0d3189d9e20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287f5f64e3d272e229804205853f8b66717d66d77be89cab4f832acc5c670475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...