MAL-2025-130355 Malicious code in subjective_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a865a58f518e91e73b46e0b9c742a42eb858aeca976aba22211555eec32c5572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131444 Malicious code in xaver-peyek4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24595535e3cd1ae9aac20f05bfc077dc98e2d1f4653eccc78fb13879dbb8b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127462 Malicious code in irma-keripik22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a032654d579f7625983e19d925f2315b20d32ba7d7827d4ec3cad7bf2e55778a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129261 Malicious code in old_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8297450753277c149856ababc72598e91dc64587f538a031b08952a109840d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126268 Malicious code in erwin-otak-otak51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30567d90df4d83352dbce51b6aabad7e8637072292c506cef5ac91d063da7210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131707 Malicious code in zain-lapis69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16f3978112962c28e1e65c7acb23266bb1b04dec4f0243014633d1288a8ae23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131403 Malicious code in xaver-asinan85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7378ba0b276d641dd2d65b527f85094ce7bcd3906037dd19d9a1c385c02fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cfeeb91261aee2758bb0e75dbbafc705cc59d1b554a369944efd537257c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127499 Malicious code in irma-semur90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61b10bc9ce4f373fbbea1a1b2b6103cfec073427d3b3935d924f996779ecd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124964 Malicious code in andi-sego84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6e7ec33ecb61efad632b245e6699247fa9d9b8b8777c0a1b9c8edb3a2f68c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128848 Malicious code in nana-ongol-ongol78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3ca0c9b6fcc21a67aa10c92002a0855d1b71092500cec65ccd1a3ab9bc7d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kupat20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b32fa8e2684ad0bf920bc89badd10a107560d82baaf092f667c20a4c41dc02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gembus32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ac8273ff698afc75c635e855796ff4202f90af80b0417afadcccd0b5290c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dce3e6b970f7eeef6f7f28bedb98ffff6cfd66e472f50905ab14f01f7806e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-dradag53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e603b35a37457e07e77579e8199eb5c11352535ffa9fda0846fe3e511dc39376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-empal87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86054907a6b2310106c5672ebb514b0bdb7434b0d259f346f5f9386ddaf5e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klanting91-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9108c349ec3b71d4377e0dcefafbd2c34ae1d66a11d7d3a187bf2c1efe84e107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lutis7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8818813423499766961104cca2e3e4612aa51ad3a4b75ce965694acbc1a008f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07837b8e2e2ab6f5ebf03b2f54fad634e7df44e172db154d6ba261e386594a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sambel5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84365d2a9653573a6889d96255aa7387c33629b723b9d91c4ae2a45d5f1ca9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...