MAL-2025-78105 Malicious code in fajar-klipo85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a689a6d57340d870afb68e411b9db7fa6097b0e95a1581e9e43f6814a104192f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77208 Malicious code in cheap_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be5ab1bb52130fb757e2f24d4f2a6990a0aeb1c16600be2040e070506707667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kepok84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57562045ad9f6762b6d3eb28074329f723630eb2de3cc44a77e46140fdf04917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0874ec1b291ae303b32649d943ec68b06184be38cd3589eb078e112c0b04ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1be0e0da4fafa0e88b1f598f58f85a6dfd588571be071b8aca75c3c798a0857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9899df3732fad77b817995b7b0c83ed083e3b0d31bf844b55bcc3830a502bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-gandul93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4681585a5d9dd69797ae578e70b0cc8a47cc00ebafc59996e712e118f8c495ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tahu68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6566a5f02662a701da5cd167b7fcf59ae0435548889896c1dfbdb02e696647af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-lapis61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d8cccc491727b59eda3b2fc1d755eb47d525fb0d15a74ea203e01f7d2a2171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-mie90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a034a0eb97aea00064de3cef9fa5ce34100a176f55fd5228339824f47ebc2337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kolak31-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51dcc9ee35578cbc1b8d66a440044d098875970553ca419eca547bfca840f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lodeh47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa785e25004aa262b22f8ff0ee81ffdd03f32fdd17e25deb7c306a00e544e8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tahu79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13d3dd4201a4081e91e1940beaf5d78d5c6e800e945fe6695e32b5950789b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compatible_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f72061c924b3d39d43261ede3fb42b5d8938a8292a664e2b8d042670d508a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-jengkol46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5710111b4fdf6808055369ff48321af54bb743be1fe2d12b9f899e4a597ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e05fc3e2c6a72189c980a13dbf4211c365f601faf6f4a5a5e1af9e33aec11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-naget60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e622259f4221b15a3317201b7c18f314a001b1cd3f5bb62236decf28106d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-rujaksoto56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac08b91eb27c28a7973f3854724042b255e94a82621dfe3d541ade70997b558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ruwet29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5d72849be2b71148286dd730d465eca1b958de576c40f35a19e63c04dca99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-saguer55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995dc0cbe9648e28ee3a50efb5b57c6e30634494fa8a8d9ca1499a7efe8aff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...