MAL-2025-90355 Malicious code in sari-kepok46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c31436bd28812a9348a11db468c42a9fe6531e60eda1e2e6d6dca305864e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86299 Malicious code in hanafi-kue38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2c2a9b16f75509710a2e76c29465a3723dcdea38473db73e35cc8c7e6bea11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83924 Malicious code in cici-getuk37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da7eea0259533353b4ea9a64615b23098ccfad1e9a3d83369defca4f19904ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89167 Malicious code in okta-kue1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc08ceb24979918e1344bc9ac10a689beb14f42806ebe2b6408fbe9b2fe322b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91722 Malicious code in vera-oblok70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4036b83c5667b0cb194f604a9261bf2c190a6e0efb816708778d71f5233a6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83042 Malicious code in agus-kue13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ff5e018bbe9d123acbcc0c5ba12c747a8f352e39fc70f84b17f3d20c64f4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8794316531a4275f7a347453351d1633e0b2c309fc66e56074f17400f8d2c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e84aa12d83f4a6e18a86be0c9f4454b3accafea3f3eee84532d10f4c73a3d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27657bca7a64f829f6cf826b7608e7071e3de385fdba33f77f1b1ec3bce6e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bf716a08ca577ad97c5532a2a4d85da58997c502ed585c8f40648f7dec5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cda9c18dfe467bccf3a2acd87fd7cb47aeb227af62a73921dc18d4a1cf3d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c995798cc6f815abbd276a237e9f08622f43a3fffbac7b73129e86e8febf904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klentik84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8043622e50b2b4f20b10bb3d4fee01f2d252c70a25e4ab9f3428a3b12470334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac4e918aa0990da623f85b1de20ab0734d9c8a4f9be6052b0640122f05262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a02955230ceedb92c2567ba4e55e16ef922b85f72e38e21bc8f4e1bb36cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82705 Malicious code in zain-serimuka33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d05a1d570fba936f606ad10bb5d0e013f6c95e08eca051a3719cb078f7c391f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lontong44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b1c9f674033d0c836c65c1745b9b68fe6044ec42ff81a065fcce3c87b10fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...