MAL-2025-104927 Malicious code in kurnia-ubi85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0c60d2e04c62c13362fd9e9d1b4ae62a013561b97db2e15a9d7f1fb8bafdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94495 Malicious code in few_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df12010d8d849dfa2d1529fe9c7bec5f9ac681826a81c0e5cfaa4560eb546d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94970 Malicious code in inadequate_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee0271887ec2557c1f740c1e120ff4f55ce934cb3bc46e70358d198cb7942d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96779 Malicious code in still_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731fd3ff1a070cda07d202f275157a3148beae5c0e8768d6f964d92b1b54a822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdba58c602c7edc3d33e74acacee3b5c865ba58b59d005a44357d23f74a9be68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d657b7855447d5550486562cb6d4c95b42963037b2c0e8116eeb2f13171fd6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84995 Malicious code in eko-ragi62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f883365e0d9bfe82f8b8849fe58712799c04fe3be3db24f87470e81200c680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kacang81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180d414d7e032dea85342316f737a198ae17efec17e7d62c2934b79adf28e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87207 Malicious code in joni-bubursumsum20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d58f8c171531a329d42c8c995f00a0c721de45ac5df6ec9f8a4703599fafe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-kue53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be36a0d4b219e7cdfc3c8a9be3107bb2c313c4309d3091e7cb4bb1ceb88b1a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d93b2df7ee444530e08a9fafa9a1bac0db72b19704e84249e1db0749d617177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389b3356731eb0b5c108ee45dd4a227427b4df6f90b5128e47c8c6201889eaed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77269 Malicious code in cici-teh63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655e79134765904795348038b476b4c5d8ec9b28389ed0725ac152522fe4a78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80989 Malicious code in riana-lapis89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945f232706b4ea6732613e5f01571fcb5e3fd8a9687978738876fb84fdf93d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-teh56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bfc459ddba8729c4ac7ec458b3ecb1ecd06711699052b67c341beb83cc777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubur35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6658ad4169c307ec05880e24bc1f374f6af13ccbd6d0d1ce7a3c1dadfc0f6f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupat31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079ccdbb46a73022b7cf455770a839bc5de22c413661b33e8be126f3d6a153d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-moci100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eafbe7c1cf4e2034b17bf153f4ee10ea930bb4d0acd3bafa589f9122e9671e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-ronde74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886b6aebd717542856c774698757cd5cfb68a342f108b978a2e8673e397f661c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ronde43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37410982c1538a6029ceccf1a407f951e0c2a1234618b21452f79f79ff2056c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...