MAL-2025-129906 Malicious code in rina-lumpur24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef8ae39850d5ab3718fca6a97ce5debbae8f1158a664c7058701e2b5772934a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129469 Malicious code in putra-jengkol64-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b6f62b8ae6fe94e60c07c489186cdc53467a776f4537370954df73dd6c76df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127547 Malicious code in iwan-oblok16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e260942e3904bc6a1e5417a8d58d8dbb3ac78df7d86b6e36462619c4c4598b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58cf85d1709642d207612cd801bfe7fd72c5e616a5b9c3e64ae900724a28d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2484cf4d838051766dc34d347fbbd507ff5768d3c96f875f173b48af0c230edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ikan35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb89601c123622cf8f452f5e4b110b72d8dd37de54e4c8b4dae9aec08e8f616c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gudeg53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc89fdea306f3896f62a1f54916dabcb0c1ae781655a65028f391bbe89986f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b8ce8b7dd540cc62c6fe8349f0ab44422e47437cc06d5c04ea44fb00ad2c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kolak45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ca3720d7439633c28d941e54a30837dfce518e43d7953068a049ba324d399d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-toge43-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a262a378891f419f33475ff3ea20952d064e9c85e8c32233b48aa4b13dae839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-semur56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314c602c883193eff65bba820015b433772a1287743ed8909d9bad1f68eea13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rujaksoto100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef51864faced8a938868519346e539a98e89f7517a97dc9e8176a088ff791e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7ae1d3604e6f2893fc6730ab9a7c06effa92540c08cc1e4129d3788398bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-jamblang94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f1122eb561d57fb8546040552bd9b63ac2eaf6dbaea41d091d062f591c33a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-miemee78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed47ac3db7aba17cbe9c7f28e6b0f84bc4b7c4584c66ce55401aa5c9a3e7631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be274cce18fab6a7fa637d8f0b9c144e688942f34cd21e913ca5dd22f28fc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-nasipecel61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f80fda26aad814d2fb7a3b661891b4238043065d71c14733a9f1df93b5551a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8090220ac4ceb4aa108ab67ca016282f89a062a98103366f41022279d3413201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 364c258ead5deee42a61bea8cfca079c874e354e211fa4899f5de5002541d58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-brongkos36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391978ccd97086497a936b969178fee0bd65324a6235d1e258d40950c2167a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...