The npm package eka-telurtahu82-riris was identified as containing malicious code linked to a large-scale spam campaign flooding the npm registry in 2024. This campaign involved over 15,000 packages designed to manipulate developer reputation scores for tea.xyz token rewards by auto-generating and publishing derivative packages with randomized Indonesian-themed names. The malicious payload modifies package.json files to remove private flags, alter version numbers, and continuously republish variants, thereby polluting the npm ecosystem.