MAL-2025-131788 Malicious code in zaki-taiwan48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadb5e4d6360c99560eb5a514f816b95d6347c78495e31f403a67c603954d8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128300 Malicious code in lisa-nasiuduk52-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd6cbd30316548e7d970cb6be07dfa71e39086bac3e1d2f97e2bfc36bf7420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127888 Malicious code in kiki-klentik30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de61a095166d45eb6b80a2784d1e50e758add354ccd5bace07f78cb0fa5853fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ec27dc802992bcb4df702a04b2a741dd0fda1e95fb60461f27a01120d740bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupat13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9507743fe6d94ae5f9a90c7dfd113c5ae1d842f125f89cfdb4dc95f5db3ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-botok48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba752981b2920ebf996d077cf37d31552d15cf12df26195265884c24607eaf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae750fe9a574afbdd1df4a2e5197588d0d43d4e85600a8bba931e3f9f03f42b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8d88a1412fddb74abc864edb9c37997573b91d91121e4e7fcce7f28ed063e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a8fa88f16416a7d6d64dc188e314f21e734ea7eb21d875af00634bd45203fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kacang14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2715e93252e81934fd25c323a4af86c31caccbf1b08d1eb68296b57eba65d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-semur31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07669a47d9f30248d1f2956e9f708180ba31ee365a64fa2c82045de5c138d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-wajit35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a55ca3af541210b09bfbf0b354601d47b99ee12f3f411b35dcad3f9d6d48ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980eba14c8edeb34ddaf83b93ba14cc7699695bede35a41d43c4429e0655adfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d9da5ad0ece02267f55b8463b30039427fe57c77120c2439ef5fea8c79ea46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kolak38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d79ea8fb34d6dc65173802feddb60dde64af3f95a3c8c959484d929821daa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aceb0dc3e678a5e21058a3c1e9a95ec3d04434f9ff808a8976eb914c595807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a1fe1cf0c9c1f73c3cb794d788528cfacb6a4b60d9bf3759385e4318a07f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-asinan81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3244393273490508fd12c8e693d40a37badce45ba3e4b326c3a1cd19c6cc7ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc3d5089cf8897aa2a1d47e01cb063225c9e517ffeca742086ac537bab349be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-rendang65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74372bcb86697e38662d5304c48848af4717cde3e7c547aeab43b14e1fadf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...