MAL-2025-128848 Malicious code in nana-ongol-ongol78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3ca0c9b6fcc21a67aa10c92002a0855d1b71092500cec65ccd1a3ab9bc7d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125549 Malicious code in cold_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7042e2eb9c430dbbd6c0dfbc0b5e010927f6895333cbc4ff179823515a1ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127094 Malicious code in hanafi-keripik4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188d035f11f7aa4d312632a880d81655aafc4559e688c7c7fdc7670d4b79115a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128564 Malicious code in marxist_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18c7ff25f8512e37145806e24acf71400880842661270c86ddb00208d125f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-serabi27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be9ec0e7e1c754f05701b42c0617ca0da54a9a25c2a456cb3b7e343b3f80bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tumis98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f591cc2dfe470c0dbe7e93f6fc46a73b2cc320e0c3ebbd732339f107a83ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-toge40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24376d126356fb35864bc24996e4589cfc216a0d93a76dc39b60ab557e0323d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-takokak23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e69ceab3568e7a0c4fc03d784bdb6829135d72cd844d9354714003dc3d0bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c098e104dd2b325b8e93bd4ac9fa8de1092eb78fa8d5af29a108271e570834a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92203e96c9332bab7bdd937a65e6e5ff8df497b720830a4c992bf717845dc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-klentik71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61248bc0e04604f20a8eaae2ee8f9aa0c0d903b3a9321bd3ecdae6d2352bd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-toge81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a10ad749815889b5fd3fbb443166a4d3f7c3678ac24066a3fb7e6ccd1236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a56380680074c4259790d532ef4f670b60de5d7084fa2422208079f83a4ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501454f95fd14e1a88c264b1b68ac0fc16ba6b45b01d874ae6c9c65fe79bf382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kupat59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6d5c087351c598ba1635b624a10dca87fb6ff8a6bd4521954fd5ad835e1253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-getuk88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cff5fe1d593325097a7cd26a9deeecf235d6e7890a43e892ff0f3bd21541efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126780 Malicious code in gilang-sasag56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb42ba86b6441c071b09220ea5e7667ef84dbef057e7f3a47ca6fb213795a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126252 Malicious code in erwin-kupang11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07afed0619aa5d897f168186f3ee76957a02776fedd0dbbbeb8f74b5e7dce8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130644 Malicious code in tomi-rangi59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67247eaed082b4448e1bd91c040272298349e0f0b143e49932f35dbe2141d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...