MAL-2025-90808 Malicious code in surprised_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3a919cb98a8ed8a91ae08cd2c487f101ad19076bf4984966d12592096132d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-martabak95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c70844b0e13af59f1cc5eb229fa9e98b75100302d1c0848c5dcfecbf4539908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-brengkes27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8efbc6fbad3eb6352ec9917cb53b8fbdca7cb2a40598595127bc18cda499f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-soto34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fe8f58a295dcb2426c618502ad5b66e8250a060553bf8219ce8d638573e289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21625cc7d23b1f730638892033729079e2160af2b806ff7a2395ad2803e61859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716a217e3a36ed9156f774cefe9d5a462026c01705efc8eece323bd97e8e2ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-papeda56-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff6080ce327d0856941c4c7e0b5807e5aec17c7f970d61597b01abce237f5ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e33bd9a194814083e307ea5efb48c4ae85db0af1b2d87fd279b3bbd29f0cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-ketan100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561b7c38bb5134128b2206ef6ac9319a746dd6d0120d1f9e5758443219357937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kepok37-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6d205a95c309ea7452f2e02b0fa6ae63743426db3124aee47035eb198efac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87663 Malicious code in laila-empal56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df1c8e26b3870a038455ac8e281576172b6a9ac8e393cbd71f334ace2a3ff23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-mieayam95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe07d1cf586649394b493e91fb924b01315594caee27566134cfe831d87c09c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-moci54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276486f5154efa2dd83607f6ce0f9ecbf5ebc2a1d332df309bcd9ef5b8766600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92133 Malicious code in wawan-mie29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5836a059d2264978c445d69b123d1fdc496ffa3244f3e826b862334e24d27c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90251 Malicious code in rudi-gorengan17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8446f209eab9cc454719998eacf21958d11eef6f4fe6273b4867f7177f453a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90017 Malicious code in riana-ongol-ongol5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc677df7a21234ec16ed620f295761504bbb2fed517c7f9accc33e075a4e9f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88018 Malicious code in lutfi-jamblang23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb05517524c605ed402a87591e616c5035b6c73c498cd9494b3749ddf483685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92048 Malicious code in wati-mendut81-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb9cb0d3f1c876aec10c8539418e9ba24f2187e892c4b4a4c87ec6fffaa9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91003 Malicious code in tender_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e453586f94307c01330c2e488432d0c1e74f643e723043d9172be0b2f0cac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83184 Malicious code in andi-lumpur53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7113d6715e9e10934c66eef2411bdde33e2c3b09beed0c3e27f59531a7dcc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...