MAL-2025-132474 Malicious code in cindy-gulai42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ada8c24dcce20c18216d290a12938a56806212aadc93f191e90583ff127e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132141 Malicious code in attractive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478874c1b546eb9c4154f8aba994b4737ad4d74469b985e38bdeb4f59362f4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133793 Malicious code in gita-kentang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8556c003e0ab8ee9b11c94ffefc4f80da9c4539836dd1225ad179235ddde188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135964 Malicious code in ocha-semur15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23ccf298994b6a9c0d4abc676bbefa06acd5c1e03c489b905dde5e9a74df5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b890de9d50af4f89a8aade14a4e9bc38e183b977485dfabd4281c1c72d3d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dc850356a563816bf71d8720de84a474486e15db72c457441f0fece7618af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132434690ca57d4f736176b603a946f93b27b43ed990f9f11b474a287b88c3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128780 Malicious code in nadia-oblok76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1822a5770699f104078a01d22eee56158c6e5f26f6cc68054cb70dc67b42c6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasipecel95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50437c9a2c378e2dca045c4821ef4fbf0486c98f02b5cfb143c55abcd9adf301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d8e5e9e323da1ed2aadc4b83a14ebb6de06696497cdb5cb83750e9b2c0fd99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126746 Malicious code in gilang-esdoger30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781c14e9b1d86c4a2b894573e51f536de886a8d4c6dd95a3ffeefe86847f5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-telurtahu37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe204b4aa164f32f4c9284c4714ee39d2439f8aad1b6350f7d22596078afcec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tumis75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc2bc50cff05feb1d66af6e03da74c2dca11341eb33a33767b82f7fe7dc745a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-pisang64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32df99c30bfccedbace1f87a3be07ce353cc244105fc46118183a59019801395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-gado-gado40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b22b8404a941b179cae238adc0d0447fec53c398a3470e32d67c7df762fed84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lapis83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6433a421a4ad01449612b584414857fafed0762dfb4860da1f51f312edbad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-serimuka61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1939e473436c8c2d7b0445de90a8dff27ebdecf7974e6410f7ee46541b6aa915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-oncom9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eb88657c41ca5ae14eb83a4dba02a0fec7dbf62b47a6a8501ac1746191f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127013 Malicious code in hadi-ragi82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00246ffbe63c8ca3c50e03d57c4fcf4ab2110c324daae6be520b4b620dcf4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131157 Malicious code in wati-enting86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bedc6980716f8cea8ac5e1fe6d3ce7b32c2b94b1496003dae05c06451689a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...