MAL-2025-91287 Malicious code in tuti-martabak7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eebba34ff03ca8ce5d296b616b5f877b644fe7d65c9a9ddecb61f414eb4818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89391 Malicious code in patria-jengkol32-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3053006642b405a9d3fc6c8bcc33bffc4d8ea0f5fa378c417e05c4499df53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84606 Malicious code in dian-lontong19-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c986fe78724b82073fe229a43c290d46cf961510a669ca16b101263a5e4d085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85467 Malicious code in fajar-tek13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a937a5f1de70c2382072b10aa12b7a8849d0b92a146478e8764400a69adfc5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84511 Malicious code in dewi-mangga63-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4da5a97609fb70d0a63db39227fd599aec34ac9b2c6015189e92ab97b33f9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84633 Malicious code in dian-ronde27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0a5b860b818c1c5ed15a945285b1dc42c848851d69fb418f6289e5004c1e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a61d16148b012b735c9241537461d880593bf27e16a81ea66187ecb22e813b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kripik21-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071432f646049b7ca4a1658dbc30eae5d966f586d72ee88fee5d9b71d8c0905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35457da64c8699beda463c6da94351baed8eb3e3a775181fcbbc8150c3b5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-ronde33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fabfb0a60907da905bb98cca09bc6f6727df4da1f7b76c1ddce2104fdd29a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lodeh32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f89c2c70145f803d8df7675c7f37817befdb8b333c06933e2391efc0be1155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf1619f3986bccefb6238d736dcf11fe228ff683a1d6d058e7f0996887ed7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400a2419e3d5624f9ebbac469fb4c3c9ed1b4f167c9452ad9c6fded9746daee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3348b971ee60122c0335fe492eadf2383e212740d7c4a18e1a1d4dc0db619b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-jus66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b5d90d23a6ad85b991f612b61a6094ee3a0b69ed6f9c7e6942d7c802751a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b35df22397ae090f3bb8c05c6bcdf85edc352ca81691034b82131a9117168c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-bika29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d29f376dfe337d73c25249df356257f672ca6078c4da90956a83d3bc6973f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-kue81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e38d6eb17555043bc4ba07501185d70c2c148e1b6c3499d495e5242bd0d551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4850f20a2e9cf0f5e451ef554553f40f4e82eed002ef4a0d9b73da52afa7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d7d90512823e314cd05c9fb16b2f0000fe624425e7677ca6cfcd55d12e36bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...