MAL-2025-126977 Malicious code in hadi-buburayam52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9053feea19d186623d573f3734492d7eb33d83ee6dd5b43293c75bc5ae7bbf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8700cc9809bb5ccc8f8f85dc639ae8837b4982c4f5e2d0f9ed9dd38aed35c70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126459 Malicious code in fauzi-brongkos36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391978ccd97086497a936b969178fee0bd65324a6235d1e258d40950c2167a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-semur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d46504069bc98809d740f8b28a9fc82a41af7b3e9a74a46c19a5dd0b6a3dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lumpur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7c1eeefa61c1217ef826be633d68c77b81ada7c25a4f168cb22c4194fe444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9112205e8043503a0009b77b50d0cb4a7efa5835a271c56e79dc9dae4eb27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-oncom31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298b41e597df4f0d4ac00dfe9f7f996c722ef08ada70b30def1151aaab5a7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lumpur81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a968da69985a5cb0ad552e8edfeed8cd1c0306023301c5b0715fb2831169b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5c11c7288b1f30fcb1850160757941cc054ba9f4fadbc42bd268a28e492e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb49086afa7d0782f308011d3cd341e5f16a5078e2fb6a917bd45827119b174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-rangi86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3009335dca0fbb91973b4221802ded49b0d4beddad6f77d72e3965283344a233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-jus96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e543f8a042854442343c0ef6058d94478f24a3c39ceebb854f52afb35ee0f546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gulai16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db468dd3a0e2649298e67baf533e8a70095c8f9bfc5de079caff7195ade7b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39e21d2ccb180c0f8f77c9e111ccfb4ea92c35167c530e40e334ed4a323eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130629 Malicious code in tomi-kue66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375d8172505d098f992e78c71e58c30dca365f86fcff685d089b322a39eb60ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f46a704f17e8773da8a731815bf9d0664bbe5c4211b288d244f8e61150309b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18fa6ce6d62455bab3b09f214315a046bec88b05d3254a1f74653353ec6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-getuk31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ace58fdeb52780251436ccce9e47ccfcaa5279ee8f86709bb15a5dfee475c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gulai14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5e7e4609f44ced7ab76a62f8e947725e546b95ec2f017589586d0d43033c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...