MAL-2025-109485 Malicious code in tania-nasipecel23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ca205bc199755e5383789f2b69fba06240e1285ca31928f49965aecaa510e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101101 Malicious code in crowded_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93b601ba4d9226659c9f82981d641b34f5ae592526bfbe75ff53742cdf4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-brongkos40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b7ee98a361f9ebaf20e7692dfae732cf075da6f757c8b84cc1345995ab17a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-esdoger10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6e2ec9fd19b6aa12dfae1e53691c7bd7cae316a893b150d6817933c77114c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lumpur52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2975c87a36fb408e87ca4d4f222125b15e094f3ca6a78dd79cacb3abb731cb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jamblang98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a69d51422f4513dd4038092b2382d70d91efa96d1bc84cc3650735c5fae5199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-oblok86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469be58c75e19bd51e7d39330d7e39734867914dac35ed3905c9806abf4a26d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f761e8b0955f74fd944ec6f5abc8cfeefff93c3811389360c4545cb17302bd55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tomat18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda5d9d99a1848aec53ac510ecda8e2540247174264b20dcbe8811fe12e32561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-getas65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb65d748e05fd149d8f5958185424bf24d0fe1e205c2d0bb0a0fae3ee6d50e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gudeg39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b9a7e8e334329a4f98a6646f6ca1d9f83e5b98e1f025925739ef5edb2761157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46040f392fb5d8919b60cfe52d6ae07f09ae7dc8639e80de8c134fed85565097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-ragi91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c213760e7397b9508d012d2c238305df0444ecc7909e38b9b921609cce789948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serabi14-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dc19b6b6922cdcb87a7b1bd9454de4a8310fdecf437f475efab8530fe603c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16614c1fb332561ea55c891a73810463b9dffee856df04f525e7c0d652a66960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-getuk35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e47956b49a0ef2ba59a1cf78c1c84c229fdb9dfb5f5dc2e199449b4eea2f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-toge41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5de2000392983b3129d874f4a5061664918865630d4cb2cf312a5cee5e9152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tiwul47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c19d7b1f650c78b2a32a0d509291521feed4816bc96793bb1e6b258156d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kolak84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400cb9ddd15bb738422b7906a1fca0eee103bb75e2867963ddd0ca3950a71ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55de0e053ab54009fd58b0dc94eac9376b2d9f600b774accbd2ac88fdd0a79c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...