MAL-2025-115360 Malicious code in laila-kepok41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5540d1b0d78b08a2a5f40a5a9a1ca608d08dca783d8a637371890ddd738130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66140a83776b332273f0a159d850c06ac70c1fd51d1377e3bb763d23a80cce4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c9bcfd7240dfcf0b9ccd15de282b3c795af71ad84c0cbd9059ca0176fc9a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kacang89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fc7be1268b3eb9ea6f9b62a75f9ea32d4b9b583992b1c73c6bb41e710edbb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-teh86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0641c8754697fc77ef8aa16f7c79a5b34efd383c47705e891b4f35cc1996f662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8085dee0dc69d642146401452d2e0133cbb76070ea4ed77c141658051a6392cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4758e1d05d335642e7bf6b52491f1c28bd46e705927c2495fc2d3dce79bb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kupang12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a607590c16123de093a05cc9957f52f8a66479268f2b05201cf1712db30713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f573e0ccd05b977a8c1c86e636d1ebbf2150001efc0c98bebeb400cc70e48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0fcb01d0e8ebcb5e3f5b55e94bf268194da5d180cf617dc3bb56a59a3e51b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88fb4504afc7a119191e8cdf429a713117a670c99eabd617c40d49fd35eb64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-jus10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5139d3e7ffc59751bddc193b4bdf752dc4c95142ef8188c5f9af4e123b551b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-jus12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd35982cd922ebb2db3cb7e1449c772083330e175e11b7597ff2f34f718e35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ongol-ongol91-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2d8fad0485cb6f3e92d8452a8f3fce82002603634324847cb75dfc985314d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7be66ef7b0ac0288ce5484fa264a5f94fe00e19692ac822ddded01dfc1d46eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kacang56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace5aba1e6039751b2e8a6f91c3771f98368b7ae7c0426d8bfc2dc2e074e9d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-mieayam18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d1dbfb143a347751c8c65442699d9974b211794d1ffa097e3526bbd914610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-lengko96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7d5496595f65d5f31216daabadbd89dfb8677a66bca21bd53e3ab40eceb381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-mangga92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3cb06e3938cf9c14186e0c417c814978ab08f040d68594dd3d009eaaea9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tahu44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246ec716641036500555d2eaf89e8431212ce746c89d59dbc9ac1f5dd9a5a6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...