MAL-2025-132589 Malicious code in comparable_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01029bf5cad48a4efb9f84dd25e81a2ef705a98d3b399161d3c01d62613ffa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-buburayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76449429edf34b79c4d50d903a396c7a4f4d46bb93824f2df545e1272fc118d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lengko83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e860fc80b2367e240f711fbf2f9c6f54c07b55630f42c30a9e76a4e75d76364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe58-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54046019af605523f1004b5f136b757389b884ed097eb23d2d162e896b73da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-sambel71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b87c32573b481414d28bb1a3e2a57ce14f3702ae514b760c6fb36d2ca4ab916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-ongol-ongol14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d007749deb53fdff0d577ecd2f6b70c5330819733b988bae436476925245189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lontong17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e3291a342de0257e4400561b8c5ebd93fdec7ffefe5c5013f481f07e207a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kentang35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ceab9fc2e94eeb55ea3dbace2478ef1f000abbf2d0be4e61b86a74e7c7eb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c898535517dd9b629fa03f172215388a97fad5915d5a5ed145d7e0734015d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-bakso63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ff1065f1a3f7577c97888cec2f04dd4d59d9337f2c7d0756edce47e62b79cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608085aa4f04b642ba3ecfb5acd4308f4346e61e8684832d644b5900cd02f367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lodeh21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1e4d6400a18e5e22c7b7985b28713f82fecec4dfce35d1411da84610bf29d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sego1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c94a603c43ebedacafd38934a458cff98e64791f7994b849df63b4db865159b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lupis79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d6101299f74a608029a58cdd9af5d31c1b77ab87e3bfb62ab3158e33f6ba60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ongol-ongol85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb20140d40d0ded334f262a253d71461bd374a8175abc7a2ffd2e2042f8afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09e1530430b89b336773c1831db078dec3535a373509eb7b47bc886bb10e75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-mendut9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322b32c1c278e94df1a989306776aa09ceae79155cf31d32ad6c269877bde076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-gudeg87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb9e12e548a66d2429f0e7f58151b14e44efe3c7db060331437834ccd20b63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-nasipecel100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ccc80267c292a1e3ba4acf0d8681286e441a62127907f6df1951acb7f18840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...