MAL-2025-130352 Malicious code in stupid_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441e22a367801be505cb4834d4ab90ebef643976033b79a97d955f65eaec6fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129175 Malicious code in okta-martabak64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a030663281a6d4ad467cc44a4bec4a6f17c3d4ef15e7b37fcceb9b020907cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131247 Malicious code in wawan-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467b3bf5365521097fed7849a06cfada0ba809ffb1e238b8b39fd6185018074e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kentang90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff7086234dc973766c362e1c9fb74930a19d777adac6cad98663228d26008e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0323a4c45bf355abfa6ac5119da304362cb6bce6c8873d77a7a43b57ba31161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-teh93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2dab5fc89c93e0435319ea063e7f773454d18f841fe1b6b3f800bb4c63d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rojak39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b0e90624d551b2d338c326e3373e55ce726a5eef932d80ff4aec433272e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-martabak39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96eb7c79b30bd601ae3aef8d4855e82d460495118c7b792ffd6327e9512c705e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lapis38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58245fef5e87fbf64dbcfe83cfd7e701fbec33b561c8648035c553beb5a761a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-miemee15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f896e8b3b652b5d5243cf66d40303954a16d67ebe8b84dab1f9ed77754654863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tongseng90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ad54cbca25bc714bd96b9aab08afdda0bbc4ef6a6d7a68b57299fffda8bc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sego47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aceff1efceba3350de47e736cbd08117a330817d238b67d1b3dce865da8aebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-sate81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b398704d88b733d0190462f7ac3ef0dd952b47a9ac2cae00dfa1ff7c87ccf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786878b33f81483c66b40223a7502280b2b66eeba481360433900c0f9d1f6a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kacang41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9f55ad27d9ac2d2a6a99a9c690a997a6abe335a8745cd90bb7ffd4b0cb55bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-bubur69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdb980c5685eac6af0bf9c09ed88d98bac52b969ce5c4045865ddbc0a0a4985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129835 Malicious code in rifqi-kue64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe949867d8b2d1da66bc883bd1df527d5f63e5854a45dc2ef98c145d4fbad6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125369 Malicious code in cici-lupis3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc5de3ed4ca02891b91c0f4ae752c7a655c994d73884d330a70e7861670c3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125089 Malicious code in bambang-sambel44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664ede39f212781ea7b7ed9a9fa02a45901ce08cf077a015ff802b0662dce0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sasag85-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52faa2baa11fecc0840521d287c09556631bf77ef1560596843c0db8aee4fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...