MAL-2025-128689 Malicious code in mulyono-dodol22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a23b14cd513e9c50b8450043631a0f514a717643efbae7636ae368e1f4a9b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129977 Malicious code in rudi-mendut87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7377b3ed7cb7d5a30f2d398dad0970545aca44bd0cc23d0dd9a0ca8f6785af2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130433 Malicious code in surya-toge56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab11937768d6d073cf632497c2ed83d6bd8f6f67c0780ce4b5f140a8b2965c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128329 Malicious code in logical_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5fe3ecabe8fb147779ae75dacb1ec4b76ac678c66510ea876495d267de2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130303 Malicious code in spicy_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f692fa9d98d11c9857ea1d954fa71a508eddb1aa1febacd3375e339b9629440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129082 Malicious code in ogi-getuk91-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf03f1fe5c441763d010cec215693e3e4f9aae7b2857c2c57dbfc0e5cf39496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3821b35a45cb45e06058ae023b34c524711da17fd105c978f15b72616a9fbaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-sate80-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c604cc4d1c93b35be710158d10a7982c7443c1f965f4b4ca8ca9977ff669d300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5397d23b0e3593c1225935df276dd388d7cd7ab59d580b9f52b8f0849e35b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b138431fe268b4e04dbeee4996e956f165b6113d8a50799cb9a9a60ae56684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ketan89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a69662e76ab568de585e5ea0fdedc11ceb83196522abc014276703e4a67d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470c2fc8160e73373e5068564f22aa331cd53da6638f6976d8f19c08c9e4d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ba29a3f8a5f5bb6f67f7bacb0c0a3a4591de88fa8e768ba751d8b9ccd315c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-oncom92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b561d604696c7e5c34488fbda9f31764cb476847d8c253b56644b6e2b16d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-jus93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a3c7f02725b3fb96d10d83b34c0012a1c54131a1d19c3d964a15abda9ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ubi94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d768de661d590863503f8b02953435f9f5dbfaf8b03b9075cb9871ecdf342d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad94a7bad96e84571a1df7fa6a764c98019a476dfb90a985f1e8de488657e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-sate77-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28418b536805132604693d9b854469b180da060e414ef336bbb79e059955e18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78d9624e1078614292e4f91c9ca5e4120556834a8b2524ee45d76f4e66abb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tongseng56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387d6499f6f5a88f3bccc57b4e185dbade3c6a58013ef3e8bc452df48e85d775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...