MAL-2025-101462 Malicious code in dewi-kentang98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed7f9793d389a99724e9e6dd7de5e88862ecac22d23713482457845086d8bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-soto50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0756688bb2db631d20b86be3e7036e61c74dd81ef2e6372dab04e3e22e5de2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b02c02a058332d3d2607f8bd7de7bbb009654a06ce1ccae1b84284577c5ba5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-miebogor41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c1757a1f923f3e27cc7c7a97205c85562eb7b0e16b8f49caed0b5b8ef4b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lengko17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a4d557a7503b40f0caeea8826dd61595fb7a24137a180cc709f54d6e528931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kentang70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056ece5498cee13382d89080397052056ece64ab79d267b5392c0a4604affc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahu53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1a0084c0580a60595346147a42da484b810d26749fca9a1c9268e6b6fe3209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kentang90-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9acc472b5f57a35ce049eed349dcbc240df4feb1d52e277bec25913d3a7416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-teh27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92b6b1db55f200ad55ff8e87b5a5b4e509181418e2ba2e0d78ee3d55302a19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rendang50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed5ccc07c484e16fe61c52ed51b2c94ac86ce75cb8341e15d74b3a689998b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tahu75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422d2f2ebba2e6fd1c7cfaa74e031ad1d129a8cab384a1b37f92cb631d77ee42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ca96fd6844c87503a939c4e527d18d9c10cdfaacf28ca0ba64dafb34bcacdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab74585839eb05f6634ca216ec206eeea709309989799de72873feb3c3560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-ketoprak72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d06e8502df1dc8957dbc0907826d0b6cb44f082264c4a1b826c8969914bab2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tomat78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b34b458490ba412a02928ce28b105d10221d9786a9f5e691aaec7f09332bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-gorengan81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d75707cf635bc78f2936229b262fdc4c168ab9f036baa0066e7ca9a70ee6500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambel34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50445093853b19ae0e98373e26d90ddfe9c837d4dc83f2ac0ab1c10da2ab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sate26-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df74b45bd0b9a50bbfd9587516a28ba964afdebbf2a0ede6c8da8a27fee36c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-serabi10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3225b6e2a7cc29ea63b807b079101abc24d158f2eee6ab090008b27d8c3a2640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103981 Malicious code in imperial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf9405f17ea3fc897550b2c60ff346feddc45536a3b2cd0be04e0d98420f578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...