MAL-2025-135921 Malicious code in ocha-bika40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3326f0d2725ca2625f43c121adc14d1c69c15a9b4c42fe651fcfb2d1d43f9be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-saguer16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416eed654a1aef465c1b5d11d8a29594a499e477c1654a75e22441b4888f6f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4281f74328d5d7409b9de751fa467f3f411b228490eb2422a09135b54934160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07aed318077684de684e35b9aba0ad1b61bbe67cc52e8eed309db2bb6de8351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sambel96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b044e8c490be00bdfd58aa27921ac4cdaacb763ec04fb17e51fe57f5511ee47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-taiwan99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b564eab3513b24c922f15d99c19aeddd0088d120d75606bfbab63e89224a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83c68777aeec42c190b67f04264122a2c5e3acd17aaa513927f177365602d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-telur79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d205babe642ffe6ea547ef58fd9bd3ffc7f97736c2b360e566b6bbe57da5b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ec27dc802992bcb4df702a04b2a741dd0fda1e95fb60461f27a01120d740bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127315 Malicious code in ida-tempe43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d245aae56e0816c596599ad3d7857873e7588c5f91312d71bd4a0ed4381cd0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128687 Malicious code in mulyono-buburayam25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e9867a7f06a047d24e0e317b9cd514335770995715c90a9e68302f2289e1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126399 Malicious code in fajar-ikan100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d3ada27fe9f088b4846d40df63d7d6d1116f58b3be0c0cb8bf11f2245e65ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124985 Malicious code in arif-bakwan95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c2ec1f3b01db9845a148208da778765419a7964f1e52bbc0b53c1c74339bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-semur19-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507a67b825b1e6eab7faa0d4af2edc03405026a2af426cffbcf7fa3b7fa836d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9045c336a3544e54e2b0d8109ccfe3be98a7c4c832e180a9920e0ff3ad1315a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631d6f27681f9929d30cd3cd3ab9009f481b7479e4fb8241fd362764ae10c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9155fac94467cb82a7aa16841178b264fa271baefd2433b0d4ed11e361e63dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ragi90-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d5e7e9a5cc8675e8af501f55eceb66e06a7b666b0142fbd73058d88bb0a0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b68b7f610d68ec3c0c45fce03cee63f3689ba798f820cf5333b5f030870b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127905 Malicious code in kiki-menjes65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7c6a426ee381cf30f2660d85229f7d9bae02f9d164d69a24ffd1f4fbc22ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...