MAL-2025-94009 Malicious code in developed_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba46003b5d6c02ac8e5be5010bae2500e2d56586bba08ea0bdaea1669520869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketan54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8398bc1da6047a0a6ba20403bd489499316639899e34a53658e2fc9898aba7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rojak75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5d309850442bbc4d8ad2ce466b79aa25500bd853fb9cbc09511f8998c9f022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-bika92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28da519c69ca4ff3849899a405e23ea538c727661496f5307ce168fc18896643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-nasisayur42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87af5706c82ce8bc3bdbbc145eca788b56cb1d2887ba685ce49b9760326c208c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tumis76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9b41be0d7bd537edff8d4c02e0d7f91a163a8ff5288c52c9d028c49933c976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f177afa712f9fa124508ba67fab5421fc4500b7e6d465e073d4d4d0841e3dfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a7c21501550acd91b1940a24051cbaab1410088401e2c8b05a300557c3aa3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c6b5a29ab8ec52bf5c215d7b647652474607e2610a7b145e76bed41071a20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-martabak28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b561d9333c2b519b907a26b74272eab074f1ab184d3cf6dfa781f4ddb96d8f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-otak-otak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe1816369d34212ce7f51190dc73423035213a5d9952a6a0790117f628d0b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-nasiuduk83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9e8d3281e0ede04b1434b7b692de860206569d29d8431967c432011b1b8994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bf74bf966ba8b51df0218a42ca3e3598a8eb453532076c9a3a55eeb54d7d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617e64f9ac5104f23ca3b957520b3a88764403f3e49ffa5a308c57f4be8dc48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-bakso33-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed652f61bc6acf9e38346d2799dab40f2c9fa2d431eeebb463bc3e477228259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121918532601c42006600386d00c19e6d2aa51e2c2295add5ceb087dd91d1654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-semur27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d812ca09d568cccc307cd96cddc86c731be663f71186b7814844246a70ad9c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-wajit90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4db60d331498b518a9a717033294b3df38b5f33d73c21285ac28265786a6977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tempe82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7acc794560e131d9fa811e1cd37f6e3fb163024ad86968ce9a2c3790f69ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ronde39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c136a4156490d0fb199e67f5077e46d424833a583f2cea4e58e844a4856570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...