MAL-2025-137693 Malicious code in vera-buburayam75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075147793c2ab0167d0d7baf8505520f18ffe852f2854b46ad033b462630b11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sroto85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884ba84db194c4bdaa0eb904206214057edf2997a759109aa533f06dcb4046c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-rangi52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd5b33f329e339e7a7af1e6a7a98da91c6e79b22b71c50e4f15a19fa3b98b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lutis86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763282f6387a1236b1ac7e96053a16585d73465b8a147481c1e4ec61015c7db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-getuk16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da49ea818fc83a7c2c8ded9caf860de77fd12488c0e9c619ba69f90bbca4d96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-soto46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cdf3d274ce5eb3b8c8f0b005e657755ce2a9ab1a104a0d93b287c15fcfa277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8172f4babad40066f1819f2c013a8f66aa22cb4dd75585df7079f98dbbd7ef72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-otak-otak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b9b364f9170f6e7ad4c970bddd383737274ea8cc161a29dae496cbbade3644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-bubur60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3867ca816e36ad1b5c267136fad99f41d866a5b8ba27b36bbda3c1d30f3610a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-teh96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03fe7060f5186d1828041f39204bb428ed4a1b37d75371c7a9fdd7e276a987b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4fb75543a0e284dff895ef49fa28ea1850ea39021e8ea6c163357feafb2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-naget24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfe33b6830bea666a87b452eeceddc42527b1753d5a12409fb38601bed09507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mieaceh62-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7f6f4c2ae2f23ffc0e10fea4625d6bc1f6127a0c3afd2c6e4a5b07a2d6f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-ongol-ongol14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d007749deb53fdff0d577ecd2f6b70c5330819733b988bae436476925245189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lontong17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e3291a342de0257e4400561b8c5ebd93fdec7ffefe5c5013f481f07e207a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e31988efa435a3b30095af6b22e61065e769a9ef7a6d2a58eebc6104f1664ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lodeh2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71788aaeb5e3c3a4219aae73127b1f28fbf5033d771af9b311b19b282abeb131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lodeh21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1e4d6400a18e5e22c7b7985b28713f82fecec4dfce35d1411da84610bf29d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sego1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c94a603c43ebedacafd38934a458cff98e64791f7994b849df63b4db865159b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tahutek99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba1d8fb6a40a0aaaf6ab6c73eacae7b89aad800283baebeb2968e19a20e23c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...