MAL-2025-88233 Malicious code in maman-klentik46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d15cf3da716f61f24582d81df7e448da520207f0b0ee8eb173c6ee5fa90bb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92359 Malicious code in xaver-keripik84-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efb66db7bd2dd3c359e05b9fd7845a64fb1d30dd224b1dd10ffd7760f0885a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90892 Malicious code in surya-ubi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4353cba54061c26a984671bca4b617131cbe72112232b9190df1f93e2b3c179a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb97127c0187515fd2c2fccc392888079f34091aed4861a7fc1915d426c0232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-dradag75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78973f51afe34b935b95c2cf28d09ff0646e7a215a19a58cda27b09a6a530bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-semur81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5be6516c1ff4abe2f1f6f3d9d5f731f8367d00b1309c3734317c601f3de32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jus35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d89f8bf3d9c776e2bcd9a05c93fba0422195766f1b4eb8ce97a47464a0aeb1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-ketan16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0562c549e91c8cbd9585be7f5730b35f28a2d6a1376ea7cb9e3dc59f7701e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-esdoger8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910d2047b5b7d037351dd71c337b7bddd9de113ebd33619258fbc9fa97bc0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lepet20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6494a289891da424a9d4a1789f1e9c77c412a0df8edc35fa3c49f2e18b98542d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d494822c91c14ba788ef80febe5b4ec1a7c7260bd65dcf8c8fa93d599a324d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84043 Malicious code in cindy-rendang79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1e81be3f5f67ac79ff23773f04ebff947fea5dfb070986660480c12f07fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85939 Malicious code in gita-jamblang90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a643f5f254d53cc4c162eb363da16e174bea979b45a426da0a1cd5b7774a659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tapai39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849612f12d5f2ea826f2f0332ef69bf3a2082cc5ce9e41d45240466df33c4125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-wajit24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238071e561afcf332c8cc3ee5bbbc082c2aab9abb75159338c7664c532f20813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-rangi82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b599713d16692d5263e0334afc4b19ada14fd55d13af27a97ede45a52be6e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kacang4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9d40c06b4fe76cbe208b5fe1ee110353f87291970bbc6014439c5ea765516a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gepuk37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501cc81e6e833297e3bd2b673051b5c50b0ef978435183e964faf08571bc862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-toge78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25572e5f10a3635cb696b585fc05a101dd15b88734c8c761d95819a14c4d4245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494cd72a1dcbb36bd9d32538f02bdb20860df564d29d6bc9be1cbf6f7e209e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...