MAL-2025-106817 Malicious code in other_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2cda1165f5a4db0d8633b681d8bf423dae41f73a6a7f28b5da4b5ec59ee2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-jamblang62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6bf016d01213ce7ae9bd028540c2ce16b92f2b07581805317e60a6a6010c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gado-gado81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79bbf1bce2c6f1a865f0f6e4f7056dc3b6e39351853e3e84ac05e85ffe83266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b06c2099dc32909d63a607a2328fefc4e70aecc700b433155b1d09cc8909c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-papeda79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daca90f9ec3ced1720403a8759321425e2e5ad412472fe865a7c4a893868233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-mangga73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce1ee7eefc41c7aa5ea7a949bdabf1687d61565ebd290530e8315898f2ec74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc3bd504cfaedfb3777706eef40b793827f78ab381c5d8c2eb74a25e8b50540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-wajit23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce74f222e94a4516ad8a0aabd8190177fc06c624e7f8429b5d439f769f525409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df154880c46d0c420ccda4df4f643fa0d175c4c7be715008cddaceb01d6a6e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16649e179f117d010a31750e426d939ae32c036db610d0a965a9dc49bf4e63ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3b870eec96883b7e922219156529694cf8047a91ac8b41785be254421a9a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ubi19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e551a55b0305b916bf29fb03c7f5fdb4fa33ee0ae96987f4913ab56d7f911f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-getuk18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6096c9aafe42a2c95fea968b223b4ba4830ebe65448c1cfb463928a8af32891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883085b41a13538f3283b39243498cc6d38f73a2fa0385dada48e9bcbaf09e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4caf57c9a57d482e91901e16add0f946eceab584c2d2e8f6db526f55e3fdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gado-gado94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225a397512082c7be16429ac45b72ef94449a55d75049515a3bde9ed10f68aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-wajit30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f3b22bdc29acdfbd00ab155dab66320a62f8605437dd4484f2c2ce9e18f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-telurtahu54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44858eda77219e554bdb79bc3dc4819e2841d56f3dd2e59490e39e50db235db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gepuk3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3848d160cdccd79e2c582890b8b9bd67701c33d61f50900a264f669e894a7eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sroto77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633fcf5d47a1b77e7aca35f786b507e15520284a9b05daacee564228a6580ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...