MAL-2025-135607 Malicious code in mulyono-gudeg39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d48e6cdce606f7caab75f531986ea98c1a927a68bfd35d25f8ef66f76a4869e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sego84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6e7ec33ecb61efad632b245e6699247fa9d9b8b8777c0a1b9c8edb3a2f68c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disastrous_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5e52a23f75a7b5f718d2144ffaa15a70c5569f775d969b48189fa84c39d77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-tomat55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c869c0f8a73b1c3c84b3e747480ddbd4eb01f4929ff3442ec342b0b98e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-dradag11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754951d1512cab93376290956d2294e1f25e1f8f743ca8a71c23a1d9d37a704f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kepok57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9f4dcffb8f9797cd39646373b4451c6b11ae161a2e3202427862e61d8c7d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fe135fdab601fa8ee640ba976ab685a36e87a9a621970efcb29a420e9cc1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mangga76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611b6cfedb8a6902f90da3dde14586e7108da7671d23741bffd6ef15a13b845b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gulai16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db468dd3a0e2649298e67baf533e8a70095c8f9bfc5de079caff7195ade7b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0143f0be9c5d756dc5daeb9f19eda5560360e24a335fbea3afc13da6c8a5305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a163e2e355b9fedae6b98224014f495ee6b3b3305ab61df2b2f97a11b7f721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555bcea0f2dc0b14f6684cfda33a8d8c1f741a1fe1096b289a58d182c2ac49d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cfab9e987183be7eba1d6a1783c7d351d455de7d56defb266385662d913d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7f43998fb38081f33754408cf07a909846b24bb29ed535bf9a1c13b06502d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kupang15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378358dd1f40bfe5b61b6e1745bdb22b868b108d69d74bfa8edff5c8ae1c70f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba18fa6ce6d62455bab3b09f214315a046bec88b05d3254a1f74653353ec6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe58-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54046019af605523f1004b5f136b757389b884ed097eb23d2d162e896b73da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde5a64040401b6f717136807cc0af6b97d4ef7706efe8ce017b0e869b1fd20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-empal42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38242a1cbbfab8d9fd7437ba4371e291f86da6b2b1baefba525db4b1ce28c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-miebogor16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4840e36bcf673d45c4d553376e59d224166122dc258f59b9acd6af3f79a7bd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...