MAL-2025-126340 Malicious code in fadhil-gorengan82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c6002a73a4ec2da23b59d22787e63e54c4b87f201a08694438912fd157dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51eb5b190e91e6f53a1579915004a006f96f740ff4340c9d3a07b3eee9f177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-klanting56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99e88b15924393f3dba94636f903ce6aa4b9da759cc2f2f12df963b6b6be08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b878b799ff20bcb133a1fd9accf37486671903fcf039641417284be0b2037732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gulai10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b800779e80dd3ea115d23cec87a1ddb5b9d0feebc6d9b93abf54d43034c2891d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kue79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee0551b77a2b8cabb336613f5e3c01985146c1a1a7ff1f2a429e70bc357e51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59191f0130098a58aa5264f4982f6f981601bb60389151dec21810c39ac03b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-keripik3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea88577431a4ab66db78de74e5855dc66a2c9f395ef5e5a2ff89abb4f2f40976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-peyek8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c68db42a34565880cbd8f63799107892bb4cf1107d1c961adff9fb17d83f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-dodol60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f66a4b484c2391e14a036c71671633b5dcbd4badeb8a0eda574f8bfca27928c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-nasisayur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1620c0b57a19946223b273e70d63dfa1b4d19b0b2f0d0fdb267788e2933c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lepet93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b1a5edd26a6dcd2dea41e1d0694b2bbeec9cfcfd2f91327aecab19d4fb1f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kacang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3d2a3b0da1e4795538770bad9b5355c5435622f072e377bd4cb73cf0d66479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kentang79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7efe9490fea8b9422d8eac05d014e088cf1c2ee80110e1ba79bc40b2436348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-brongkos16-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84180c05575ebadba74e8fd98b6f13ca5ff3471a5ae47b0b0f09eb17a8461710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-semur55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deca01fb2dbc3f574ab8c969d33f83858a34dc616cba1732964e0d4578dae94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-saguer46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe3b79ea30be29fdfd8c4363d252d4c4a3f5fca35dd3da32a8d8e0f7734e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-enting91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6331a8b74ecbd9e95bdb32465ab415e808990c30a6ef172a224fbb9a0f1958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a2560d09b11d9ada5189505bea55434ce69dca5dc5f4c3b4f4ca2b11bc54a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mendoan97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc8298b4ece170d2c74ce28b6a9329fa1331f2b160ecafb0fb462be0d19dee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...