MAL-2025-76814 Malicious code in andi-bubursumsum46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64ff925f9271521898d948a80ffed6974667ded5ab741fe2008eb3cfabbe840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727bfacb7617fa3b70bf530c49f917277542c89833b855666ebc3b005778c14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue41-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760f57bd3ec6de0c5752ede54f9c384b885f07510a828f282669cc379fc953b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-dodol63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61035dfd46f28cd082dfb1d8d6960d2ec27f1bca0e6646b4b8505b9e77e98b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-gado-gado42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b04f608d39495a04ad1143d900f29c943222f78583797ee5eb4f9a644dc3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc695943f31212a8401b48532304526d7dfe313aa49fa68b5c338070cb3af75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-bakwan33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf9bab8b9b01a7b6252471ea1dd9115fa0b2312afc3521851aa5c27d8f9a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rojak4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0320ca63285710e28a8fb252f1eaf9e6543d4ebeea54d603f1ecb7a0b6c053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mieayam43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb743fa025d87f9e92711957ffb2da8572c628f90b52b3881e8f872b24b06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ronde68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83086b55b8aa030ca67f7f9fed583fae2c2692e2ea6799c96b763881ed29b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ragi16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219b10a83236bb98bb9c22d56350dddfaec7b91699f074007730332ff1de73db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41fa77e42b68870c080346214cdacd36cd01143c0df077fed87e9b861ca0b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3edb6fa5a033e9c212fb88391f1819e19f55196dd0c9a6e2e74684443f91c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52910e06cac537a5dccc4f18e08fe10fe84b2c4ace3a109586b81fe2d2b6ff76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rawon63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3664fd8307bdae3f66d748e03b5294035631419cfa1e053aa4a631d83e9c40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80b8fe9a547036d6cee17ed61e7216ea485f82f069a74aaab78634554b95a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799fb4d2ca9f5e19b8f75435716592f3f00930b4ac8dcd506b0a8de2a3d0c4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e5f53bbe46699117729a3724453594056275e63e602f7f89f89cf6d1fb740c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-bubursumsum81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd2102359b87768f50729906f5eabcf52bc64f9c965110771845d33a1125176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lodeh67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f34b0864be66e0ac645d2f857b70ee39b709a0d492b2fbe0d2621e15aaf222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...