MAL-2025-128384 Malicious code in lutfi-lontong17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e3291a342de0257e4400561b8c5ebd93fdec7ffefe5c5013f481f07e207a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129386 Malicious code in poor_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e2dd8dd7fbaeb551f2710fe97c87d51f0443aa4f9717ed559696abfc11819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129491 Malicious code in putra-papeda41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b5e9b029a5ead41b3618b5792907bb0666a4cb976fabb314bc3c754cc19189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41940b790b36cc13348ae1458e36e3ff3824a2302f082066a93efda32581ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gulai14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7be8fdd1643755a833b925a0b653ef5ca443124d91b62d9a3cdf01ac9c8225a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lodeh100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbf47301ca1f2f4aebcefbd9fe4c3be5f4489c84c4821fadd78cd31eb8673f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7451c1467eeb10075dee14abc4472fa39ccbe3fd96a584316eed02c221956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b62a437c48f3417cf7fbce2e2848d52016f8ba636a6e2e2bb838e87f4216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-donat1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829da2efd5dee175ec53cafd26c3f9b70016a084f5c7f0a5bed66df5d9c5b3ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-jus8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a2720c62b9d2f31ae9bc3f16bc38fa8c1c2506a33cb218344a79680d494511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dce3e6b970f7eeef6f7f28bedb98ffff6cfd66e472f50905ab14f01f7806e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c861d6513fb7a2a7e1a87ca116689613cc2c144953303f37efd4b2cb1434b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc49404d0221ce1ca96b2aaf1f46d5fc11a13111286d931e99008e1d33dadddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1f10472e4fd56b7cc6fc6e47558e2d9c1ea91f6ca60b27460d391111666078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ketan14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3a7d7e1808a879e4a8daf224794286e7397a3d5d62948a182dbfcd35d8b0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4bb467f3f15fc8a6b340466da7bfa79b3124f3933e19a296d834b9fd6af4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ruwet36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f23117405ff95634dd3aca70602b62f3d8598f7fde5d70cf364ca2af86a5c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-serabi25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f2ad049ecc428e7f88a78eb90e4dfb9249b29875967ff96e0164310319a644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad00bca74402341454755acd4dcf2db84ab1a3449e0611feb74546a5b93b5025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95075f26b149acef1afb632239f27d3d8e7d0aa5b2ec989d9397ed15849255e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...