MAL-2025-137861 Malicious code in vina-telur17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af2b38eb8a314b4553bcab16054ff1e3274ff0b5bc0fd85531cb53e3d292229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133604 Malicious code in full_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dae2192070f3eb64ba679cd6feb208441e9526c8e5405e5ad4bd538456250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136530 Malicious code in random_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbcdd78104204ed5f982b05511177938214e848623a9aa8d5dc420f3233fe46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132896 Malicious code in dono-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3ede7184bc220c68f471edec33b4f9d1614c22296887a9b8408e467076e0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949b19414953a5eb293debf9f1e5bb85e29c97c630cd2146a4dfdf5e04cf3894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tahutek45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cf56df61f20ce79678132d1c7bd88f83dc566c021622f8c87da510ac0cddd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kupang91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12ce9656e05e346452116c318ec7f7671a92a188fd4cc6ed80340bdbd7debe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-dodol22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba5f368f3cbfbe4d6fdf21a30820ff55cb1569c96d2a7dc7ee30d9d0400e180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gado-gado8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b44ab1038567e8de9ea25b8376d57b3a75a3133d317d4d007b5c70be1a626a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-dodol52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4470a81c86f34711e5a9970b921ca47a5d6b7634069b111976360cd9be9877a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a6391e8d5fac7be771bd35b86023ee494fb128f7556c94b668b86b72c6b26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9077d5a6acaf3364b69f14f106930c5606468ddee4f36256100c2c91307d98a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kentang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041808616be661d9de303792023fdae222d9f35f160155e836f84a30472d111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-mendoan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d7e8663357a69bb0873691c54e8b61ba8754408571aa3ccc2f9444f26a6d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sego100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cb932ed363cb789ada40e63f49727be9cda0d20aa6d77b7471ad585830e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gado-gado23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e2089fd37e78438170efeef00794f439900a86acea27de7110297729966b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131047 Malicious code in vida-semur36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e4a27ca3de4b51ea72a79f6d37c6d5c05e7ecfeb216985eae561d97be588e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126876 Malicious code in gita-menjes78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e297f2c6bbb21f83e3cc590115db570080cb6857cada251da78a31cfacfa0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e4fe2a5423d1527d5f133f0d94ce6b69b03431e9350399f31e33405cd424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77671d77e2cace1598ca6357519b8f44c71b775650eccfe69dd7ea8a989d5274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...