MAL-2025-131817 Malicious code in zul-gulai38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53e3c2ad74afa6ca12553976bcb6c5abba3924bd04fd85146f63874c7336719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c6c45d01e9543b3fd6f5eeb869264f7254926767b07860b964dc8ebbbe9fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b0e4ad0af57d5d6f570e443db2efd6625747e974c9f89a01534335dca395b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tek8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07ca08fdf4ef3f334a1027f8bfc8b8f90f6c035c3da31b2aa6a4afb0d268c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sambalado32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1c362e0c9b58775fb5d7e59ba27ea99ec82a82f4919d2903b27f175e574f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-buburayam14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079dbbe0650e0cb3b5d803652d1d161ce81e54688c2d0fd49faac8f12e7ff910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d47a7c03b719d0fb8467589af2a62bdf378d0033a92c24392ee922bb5343a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ongol-ongol34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2782fdd01fbaa3fb006601fdc0e7515dcc7697251797bd9e5e80f9b27d720b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9585127f0a6de89927c58c50303a9b3627e48b6295dece4df6c0fa1023886ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d840b01d4421bbe7a6c47c1b24b7519c4247a067d360b3591c910cd735012986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-nasiuduk26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68255e0fa61e110698101be543f540243d559bf0e3a5d5f88b93fb7006b740de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdb980c5685eac6af0bf9c09ed88d98bac52b969ce5c4045865ddbc0a0a4985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tahu18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1765d05d545a093fc4a87f42f83f839cebf19ca1029d712ec24b33bf0ee0159c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db99487c3b19ac75a7a2bb8a1087086e6edbdb6cf7ca46b714fd5aec71a15b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-buburayam26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e20b11806443fee43cf2f87599359fb72a96b53ec6002746f7699c4727d687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lapis21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650abb7e64fca51fd124eabd911609b799b0e036562d511e81ccbcdd8fb58a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sego46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe0775d621c89dda1b3ada317703c282f244cc4cc8db6c125ee90ac6ab86e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasiuduk4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3f2304f1b5814b4fe750150e18e53f009de70d535cee248b445dd79f4bef27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sego95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f0827fd204e9ff26162fa8b3af4bc44ba4500a9af02f8975c6a26dc26cfae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-liwet16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f179dc0c8670b97460c0d976f73b47912cc26a8be86049e4d7f9ef472885d38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...