MAL-2025-89806 Malicious code in qori-botok99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf979414af45a65aa1156ad7ded0ab50b1b3a51faab6565ab3523f38a5a5f299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91294 Malicious code in tuti-nasipecel29-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437937171fb842c17663472beef66f16c9b3b8f6fb5d82dedf52fce205612637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86445 Malicious code in hendra-taiwan47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5266995f8eb1da009e99836a9982b71d9e6e77cce1a4a53f53d6245164eb2807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87766 Malicious code in leading_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34458b9501fd8ff2b11814d2085f9c513282d775435bde5cea23ee0256cb788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90196 Malicious code in rina-rangi11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146a1e76c22a494cc04d517fd1803b72ec15b66cc3c2933015775c38d80dadd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90961 Malicious code in tania-naget87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a563825280300156bb8b170760bf1bc49830749f22c60e22934936416b333f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8104b67b7715cffea077dd1a1a4b15a8259cdbdb78f8f75351786fede7c9e55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a05037ad9d93eb481d53f78f6a3e29011a5de7e31bfafedb0691fab295595e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e01bafbd4dc7cf1b070e1ea1d53641fe32bd9fb828a3ed5aae4d874ecc6f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sasag40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc3f8a70d19a3ea1df12be268f2315b68a81392a7d609be199763fc53103c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e59fefea03c821bfa1cad91cf160dd88ff6484192b8456341600436a5e2e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-enting15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5f1d880b2209780d32f6ac908c31f983a1c0b3cae6b4725b3805f128e2026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-keripik1-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a1bf75cb37a26bd414c06d39f0919acb5fbd9e7ed494ce1832d3bd9824ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-bakwan68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15930a2b811591381ff42c412584b27f55386682300c6d39540ef84ac02118fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasi67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63a6c85e9a46c1f7e8d7b2b793d8fa8dd7e8541b0d6e1ee6b86d188f7fa06d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lapis88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525cb96614503f736daed190e5748866c7c098d2a4ebd3f1d96547513f38774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-lumpur40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fcfc838105576a8340ffe88308425b5fd6bb5c58ea79941fef2687ae21a9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-gado-gado3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a514374cc41545bae124c593cbf6cfb942301043f9e2add578839ef6e913a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-botok48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8d5559069a0558b0e3110b9f233e7d4430428f237ababb1eeb03c53b53461a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-jengkol20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332d543bd4ee6933bf8949e2fd02a76c8cd5f9b9bea3999de1c185878c47e2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...