MAL-2025-127713 Malicious code in joko-lapis89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6151d106617a16094b40c8709f00b8be375672b5ca39ea614c211d9926c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127572 Malicious code in iwan-tapai48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f766c202538557c73e62a2ba69bcb7233832a0f5568943617b9f246f71158c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126655 Malicious code in furious_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61b6b5d452056ac90152a3830a273e486a849b0c484ecb7ffdc3611d2d9876f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128564 Malicious code in marxist_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18c7ff25f8512e37145806e24acf71400880842661270c86ddb00208d125f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-lodeh98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad375b3531eb637887f7066ca9e80b7f6edbea8b76290d8e2cc51b0ac64e682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9aceb0dc3e678a5e21058a3c1e9a95ec3d04434f9ff808a8976eb914c595807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-keripik42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809efcc3303055e6de0bce0b292ff0a4fc213e3375bf61de276b256c01303e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tumis98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f591cc2dfe470c0dbe7e93f6fc46a73b2cc320e0c3ebbd732339f107a83ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-lapis15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257e24c199a2db6c5374b6e258738f74cc5b7d2b24a5c676e3d9a8de1344c6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cde64276b1b0d479ac0724f6e733858915e3b6bc6a2d0eeae71c4f2d90a748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a56380680074c4259790d532ef4f670b60de5d7084fa2422208079f83a4ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-toge81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a10ad749815889b5fd3fbb443166a4d3f7c3678ac24066a3fb7e6ccd1236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-getuk47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561077a04e4b5ae70e045fecd5d3e685e75104ab0d74e32eef0130e0c09728c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-kemplang43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f6e83a0fd6e5e75bbab99c9974a9c27c6a5551ee8a966e80f04f677e7ec46e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-serimuka81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1229a091614156443628abce0a15fc42c972b85ba5a64f47829f195292c3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-serabi27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be9ec0e7e1c754f05701b42c0617ca0da54a9a25c2a456cb3b7e343b3f80bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-botok59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b094881ae1137d8970265e902bc24a78e9f63d63e945fa71335ff33811b3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125549 Malicious code in cold_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7042e2eb9c430dbbd6c0dfbc0b5e010927f6895333cbc4ff179823515a1ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-takokak64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c34cba8425a217eb2330247163b8a6e13ceee550e74df838959ada292e85bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...