MAL-2025-129416 Malicious code in primary_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7bfbb3d6e4c3217f9d2deae52a95934e66bbf57beeebdc85faf6747d422c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d45fca71d06a2669ecc9a862385e7a8f15833d399f0966a19abfa9c42a7d80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bubursumsum26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2d9a8b2593ccb30ccd9aa12818fe6588184da94cb0fb23fecfa30dc17ed552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rangi49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c108b0765451eb457ebf8ce5440d224841c650bd992fbda439e346a0cd4923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d990f320631820043b2687e94346a6d66dbb60b06d94518ff08e8153a0d31d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tapai51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a8f23bdddcef3012c53ce781dd30a5159be8f2a95f4aaf6a7f114bae59342e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-gandul20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9ecd2430848e1cadb1876522b684d5805ce68aa273eda22e46caa943266650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lodeh86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def2846b67cf6c436541208ccae5cce2744dc3c73f76c65d4501f6f197bf8c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8da53fba5a0649c5a065e59dcd6aa4ef95ed22d0f042dde126416a57b8f4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-bakwan1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4c689b078fdf4ad559f22ded79a5cceb79d94f4c4717bf44cc7f4951274e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe36526986f8bb54eb439a01ae1a3dc823a60558a7d69fcfe85735c7221ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jengkol13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdda6e84f74b917f72e2732f1f299ab192c96620ebde829a7bbe1ada2a1604d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026d309a1d98a500980a8ea19df1429df4b17160a9d656e1311db1b836bb03ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kupat63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f463d95f403823f25b14b64b53d840b01bf3c12601c9b8b8481e5784e3ae5044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0323a4c45bf355abfa6ac5119da304362cb6bce6c8873d77a7a43b57ba31161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae84da24e1504f0ed814c534de5bec0d36554feab14fabab433a2d6beb5c18d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3199d7e95ea7d7588dbdc8680d990da08f482ea2755938978149d70083f536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e488d29b93a69049f5d60de0f9934ac7fbe1c3ac0aeac4f4d4076bec202a2868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a431a09806e2c5256945c0c770a433f008b3c8b84e1c190b28132735e7ea62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-bakwan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16a0a338a7cda7b9b2d61eb635925d124a6551104e3ab90e14e366d37f3f3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...