MAL-2025-125478 Malicious code in citra-ikan48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e69b0aa814a3b03a38223052dd9cb8c7248e50a1be8dc6086cfe0d7c861fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kemplang62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f735856bc1273616a7e93a961995257b4ecb0d40d8ca7f7d09d40ebda840217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-brongkos58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22b4f3bd40742014f7ef8c09984b2d3ee7a8029972eb3173b212aa797292c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b7c84f11d443c01897e34127b4bf1cd4651f836b78152d1df0cfee7cf385dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bdff8ad09afba531c9415a3640358c275d189d8c1fc67da8f964d268d0c4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-semur67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe2222b47c55985888f4c1af3423a0056ea01c50417260252e10fbf89c44d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-takokak67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0ac676dabd98d28151b946afba73b2b89c50d492cdb7be80df2803b339766d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8b95b0b830986486db97419ff9a299eb93e232b8ae0e8a336ab9e06731ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127839 Malicious code in joni-rujaksoto52-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b539bb2e9a873fa3b94278ccafd64dd5a6c82f9b099b92bf1bb1db76b5842db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128213 Malicious code in lina-keripik4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8716dd4a9bf42fadb236e4aea2141e51aee6e0dd108136ead9d98401a22b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127296 Malicious code in ida-mie71-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6668295f0c751106b00213c8fe49f2603af847833ceecbf303c2f8c42808207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130899 Malicious code in utomo-kembang52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870db23fa9e8291fea172bac8db2a7846e22620b173ada8d445db26ff4e4f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128537 Malicious code in maman-sambalado74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a21a1fade685c3bd5ab152ebe15bd7cd1a681f0a1787a58f5d1f868138ef84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126233 Malicious code in erwin-empal40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c82b1c1a9374d28692e6018c85f0c93ed0ad840dd35346a8ef99e797dcc6d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b6319bcae58b38e2a88bb88b07537d4c4cf93ab82bc771a900d9707d09cb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gulai24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f4158c6be66fe91dc41a974e941ee78ea87955acb0d90e7e33eb2586ac4f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasi28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a626d8d9ed446b83b23ee9b1b8fd2e1bcc6892e29dea1fe1c65a158821466f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26dfd3efd868bc317105e34bc5a882dddcd969ad40a1a71d4d6aa25210963e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ongol-ongol10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d7c5ea3b200dcc8f60c8206c82108a0e4c641177849e48e0347aade3296865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-klipo41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f1ef41f265c36bbc3fc88f6addeb5d909788135f33f213d2f0bb0b82a38410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...