MAL-2025-124978 Malicious code in applicable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a244c93575359e19ee5c2855c7c869eae890c730fc599c782db51eb5519fc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131211 Malicious code in wawan-bakwan42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d280c0d29f9349d3041de7246dbe2905518e12248f2b8416f0743c5988e5918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125954 Malicious code in dono-sambel77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b6b9c9df33f02a6c23f5fbd88e459d6e7d77b6485362df48420030942e89ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af21742a882b2496e27316e0e1fde2ea0e6a7096f9a62799361e0d27053373d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-getuk92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e5b6889579a3ee5351b0e20c7ed492ba7d5b0c6e778315dcae76e69d735abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4515a12f22868c0b7e3f759636d3813e8d372f045a40722cc922ae47d792a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29198d19fb0c021baf2f71d6aad95fe0a35cfe578f09cbacc3814b8b6c2df95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gandul87-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7920265d8da37c607a063e66f7285cd617a4a52d23bbb82694169327ba73b4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cde1f420c5db2298b8f5edd12d740b5c73015c4633e691e1297628c52aaef5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kacang67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6269180f90abbe53682710aba8b98234775142e605c227a1db15f63125e64c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-dodol86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98faaccb1a3d5020ceaeaff3b0f11d0122f1f05d1c82994746970c1fa43dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6dc4530d02158a41cf252f58edb66fe6eb269ce3000fddab7cabe8551fc58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a535fb98666c25947d2b94785bdd94ac74bd3f509669f34b7afac8348c15a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakso19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef20c2411759258a5e0446de8cb05df403bf224e185b01aa0cc24c9d9e11512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sambalado36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08827c54c9c5c887540ffc5f5a07850d088f38b96d28c979c12ffb73a74f015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tahu57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f3e169b7849cfad1d9c6d0c3362daf75475df2741c0579bef9e22326d1af25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a0f3c4a3c74f6f55f06fa1e5152dc1661a80b54b8f1ce2ab1669071df1ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-tek100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd0c4c7790681b8649f5294adbbc08fc8f21e78484748b392fe097c386a74d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oncom51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0ee3a77678df846b5da28f3b2775d241efdd761736a6c74855e50bba67422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-lontong25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1587b1e5b548fb5858b36db4de3a7bd559c19f58ef57f969c21b2c6b4cdb64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...