MAL-2025-123429 Malicious code in surviving_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a4e7d37de5cc2d2236bae25c4b96e42b927ac607f3a1cb28130a27559ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121555 Malicious code in lisa-nasiuduk61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718a2b65a45b4f7a6366f52f1f25cae0d9fe66a4aad0c094924b5ab2de89294b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-oblok50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6e5dda7d8ac09c8fa1ceba45728e3aca2db75020a6ffd217582f31b901a850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-nasi9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930ccfccfb2cf5d92b4ce52c16be3de0af6e80cc69563cd7e5d4258b9fa7f9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118772 Malicious code in arif-mangut31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ccecf842b1c8c41d60d57b1cd0e9ed507b6e48fa6f257397f6b4b277e8886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122234 Malicious code in ocha-sambel87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdf62cf4e5873edee0a9c0bcd392ba127e3a7175be9b13d81864572f89e5b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123492 Malicious code in tall_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c040a078130f4e083acb7a28e1c8777f16202830b2dc634d31d50010a9820f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121875 Malicious code in muddy_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40784046231fbe64c50df16a629af34d346fd10d6b6e0c12db35f3efd837e5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119503 Malicious code in dian-keraktelor100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924e4092a31c87e6d91a31b392b3c844ff7243f7f05e27355364ae0a468aecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122700 Malicious code in putri-saguer46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a4d36ac1ee0a59a30c52a37de085edbb4b41d78631552815141acde16aed4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bella-naget41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe163801ecfcdaf03176fe7bcc1f863fe6616af8bdcd83a75e196e772ba4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kacang9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a2968ec8266d90d55aa64c181dc769761a139aa7084d02460b29ccfa32ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tek59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1527639d6a5b53aa0468cbb62ac4eabe0885f83b3e0d5d84b73ea7f8414a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-bakwan37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa6971ec16546eb4a3134f6a4d59cc75baf78bb1cc2f79cd1610d0d5bb5763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349300c6927e55652c3fa0fc99f6aa1db87a21ed5c7cc094ddb31892b1073c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klipo10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1546aa05a86e9d24a1aaa0eb1e9764ae360448fc1f6bd37ed791dc4794c0989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e272748f675a55fa42e8fc8abdff9a1a9075d45aa9262baf6849e6ed622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0807829606e40f3a27e90c16022602e6e05e2e382fcc92ff3062e00f7a8453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-mieayam79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657a45a7cd9f9bf4a4c945240aeb7177ca3c138834cfa2b344d4f083b7002ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...