MAL-2025-80408 Malicious code in odd_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f0986cbb1f55da826a2adaf143c76734a987e38a4bd9bfd3724dd444488ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bakso92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980fd7f9541488847f7bcd8cb3a36a2af392667835a3a597bce16f253aa4ba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kupang85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef57005a78679976c300842757030afc963338c468fa42d2115ef352129a9cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5584fb1eef638ef045882299e8117cca6d1acc7cddbfde73488c0a1ab82f9c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1278bd423786dcd9088917ac2aefcaf938e73fd6a0c1fa1b550b605b2f3e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tahu93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0072d0a12934884630004aa6262fa4a237976da0b362f8631dea35951c955527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-brongkos26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a4d34f8607634277ba5c1f7af3e23673ddbd45fd319f2ed43efee132fcfde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-rangi4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e87d88c2995f01ea41c5524a79b2b68aa599033582c3379cc8d8ec60b19eed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81fe19a89737cd89faf7c0421996b6c62e8011ea202340e86cc4af1a6459649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-martabak10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c9a551846172d17e9cc762e818b266a64fe627c25a0e9f4edc0e0d9f4ccc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-tumis98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9926f0fad31eaafc4b627456bd42480ebfb9d4a54a7c2999f76edf77bdfc42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-soto33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15457201da06d7857ae6f29efdf548e5c5fa5f65228b03f09f0f7462ce7c95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-empal55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d9761cbef9d11f8ed7456f2e66b06aed7c6fd0ce94dd227d160dc1f102ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-jengkol95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609ef232972f9926cbd783b4df9bdb08e87e0e081b856bba0009fb9d892560b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-lontong68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a934a801ba19cda59c646d977ce47e66a207f09a6c3632fa235d26bf9a26a539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-tahutek92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7de1bf41caec0e76ae29b42576c24d1e481a38e9c8b7bfc9730f693aae76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tapai27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f9015f222effea2d4809fe51682d1edeac6b1d74e7860da848b363857a4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419f78763f75cf574575fb78f4453f5e76db5c4f34d7c4603f1acd05650c0da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe30f6b35dc8851e4f3053bcf93c47e27805a93768ef3d082d1db530df42682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaccc2dbbf0a32f1ee187ec65556ab16bacaffd751fb03b3d000bc7e52ff0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...