MAL-2025-136172 Malicious code in passive_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc27191c5b251d889bf8c0a82780a1378f78faf5cbb93efc9622b6d2e30875c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137886 Malicious code in warm_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3140103a8ae5ed88fc599205594e17f8e63a151d5ba7e00b1de6828790605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137427 Malicious code in tuti-keripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83499063a6155a27491e9f3ab1769a2eb45f9283956c079c2d2b56d21a3fbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138147 Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-menjes17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcea5e808cd865ec41a5eb196672cdd6f55a056f187e0e47b78a7801d314f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-papeda62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf87246d9f908b2f3994f265a51782601de2661127baf3f37cdd73d40f84154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-soto14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fec8fada8008dcdeadd74fcd5ae00f6b051231786e59314ae900cc181f3665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-gudeg88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc92a800ae7520434d6d591d07bd43c5afca38b422239b9ff5eeb74cc2385af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ronde82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad917786c840cd9b76bffa50e789bfd482f4531bca7acafdbf548d050b1262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tiwul85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04016d49c3316567799c48b9bffbaca72d455f457e522260074dae9dec34e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130184 Malicious code in sinta-tahu6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f0e553e6bd4d00909af6c5424c9f3a619188d240ab8817e650d1691a2129b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125484 Malicious code in citra-klipo69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b85a8056d1d59ed2fc5622e50f94d680627d585f6b528bc3f24164ba6cf25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131598 Malicious code in yanti-tempe88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62f57948509eef87b40014251368aa745ad84af1337cb67bb05e9cd27e97557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129944 Malicious code in robust_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613e08f05a8451bdd12b4bd8d128e3e9848a5ca8deacc812a1f2a12db71799bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kepok83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e7c36852715e0aa3f202349c251e4d0582070e3ff237e6010480e8badf6797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-martabak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ae50bac6ead2ad3d9c542339ed6af5f24a0ac904b81c87b4c4795cd2fc6c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kue61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66e23dbb5104b915631bb7ea0c22ad4212cd27d89332bae930a701b8071a011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-ikan36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f955dfbce21abda86f352dc974c21c9c9651663d5d940d7a6c04c82a6303c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lapis9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b225a284915df54baeba1d86fab4ce399dfc548e3e3566e0acac9827ca38ef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...