MAL-2025-107747 Malicious code in raw_scorpion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2c54c8c3a1ed6d2bc443f63df8c062eb12c0b8054a65ff376e98a4578f3139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4034501795becd11d84e3a8e47b1e859ee8737e2300fab2048287ef8312655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_haddock_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b8128487f0defae3787471f4ada8e1d0bac5c5af5b9d05102205af8fcaa2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38962c8e14065cc785625bc1abbf7a1cb9fced2ee39a72b8b4058bd9503d95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c22282b515427137349d449cec6f544a6407a3812717fdd7948b9025d624991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107f8f6c3a3449c64eb188a86be69f663fa58d7755c0e961a773d5dbc14b345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6efaf16b32a53b85e96e436bdf78f9b5c6d52640f8ce250e24131cbdb24572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff0402eadd6e032d72f1c5846829846c1ce65c0fd29233cf9dc6f60cf0e5e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ketan23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d128112f70b0e2432e9992e035e810d76ad9de7582714d132cd27679f6c762c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kentang35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb99fcbe415cd3f6e0f03973accd736e887f1e21c5052f5d452661bda93b647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tongseng23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ee5b7953940016963fc62013a0c4291642c0ae34b6cb481b6a214011ab8eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b4e43f6b714fdd4b91da9b12d22575ff04ea83584b130bd04aa50d74a4f57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gandul37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172992d692dc0789cd8cc5e15496d71667abdde5b5f8cc36d8a756f4b5c88084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lengko71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d92914d989cb53f153858c2da426f345228f64c3d62db3248025dbbc9ca183e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ragi96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4ba725ad612975bdc42ceb21902bf39ba525273aff8fcfa2ed3b7d2cfbfe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kemplang41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fa13e1782a72a65744b3bfbf7ff39e00797a437c4d020527b64c4b3be9d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-semur56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9052772984790f5609f3455c093c7825d83e375903088baa187fb8230e7ae6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-brengkes44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd10caa4e150ace152165b7d9f96fe2866b5a711cd9a53fba847290a4518fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d4b0c40b5803f9d76e7f5da71af9940b6d1271fcdb6ee37a4e9148115a3667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d8e01cc7aa6e300a5895f621cf184d65e2b685862b7b4baa49747d45045fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...