MAL-2025-127345 Malicious code in incredible_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c201b03a06a56e05d624ea3d44bdb1f71614ee198f86eaad81e13a281a8c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125779 Malicious code in dewi-kue62-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46257e4804aca242667572745c48a407eef0a499047510eb34d099fcf53a80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-mie94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28a42a0e1cd6e35470ac76e42bc9871c1ad87627562e9d030658902d2632666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ec27dc802992bcb4df702a04b2a741dd0fda1e95fb60461f27a01120d740bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129506 Malicious code in putra-serimuka47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f12626a8065b3609309a2e10c55f095b70fb3ce44f33ef6e35a283b5f83697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-ubi58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce990b5361e4e0459eccf1fac02cbc05c547ed6120ad6594f119a1f43ac35101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef618a7bc9d47e88c98b04ad13e451c6410a9f45e14976b0ee7c8a4709f8d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kembang70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd089214599808fc01055df311ee78f705b95bcda7bfedbb8506703034369cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-nasisayur5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23dfe1d854c3b50033a2241013382bc159ba6fc4aece1ccd5f1dee9f8a13b0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f89edb66f5e885602ed49fd226d4f1724f90548e7fe201aacead0162ea8205c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-botok54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b686192a414441de93364bf895e219fbff386195daf14b950b47ebcf0a26bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tahu76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e761d92c5a792e7faa0d823be36084c967b19175fc0af8f68490f1081fa82a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe949867d8b2d1da66bc883bd1df527d5f63e5854a45dc2ef98c145d4fbad6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tongseng31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8367275e89b69dce93aedfc389d690e9b481437cfc783bec47e2f955609e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d338a31505ec2e11006fdce752200c565001b70b44d8d24cc38abf0de739a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gudeg54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17c663703b2cbf7d9a9a8fa1e166d55e75a18561d6c17bb41c40150e52f29e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa56509d1bda7e82e5683d2d7113fa68ee3f3420d6bbede94ad5a6211494c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ikan4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e53923ab091ef13d69899ca8ea10b3529c025da9a81f66f999330132a721af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tempe80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817cdf96b5dba88bee00382cb0141c65921b6a42f29bc4305e21988d86aed9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...