MAL-2025-90528 Malicious code in sinta-klentik70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b70f4ae7550c9947745c21e31ab8f2a0c5bd43a24dd42b02df97e0a80129bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89317 Malicious code in opposite_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e3646ee897fac79a161557032035f6417985a7886b8fbbf557b2ac64685c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91722 Malicious code in vera-oblok70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4036b83c5667b0cb194f604a9261bf2c190a6e0efb816708778d71f5233a6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83718 Malicious code in budi-kembang46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2013dddc0e0bdc6b686a84d84a974fa6a7df4e4793dc9f99732031cc637844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8794316531a4275f7a347453351d1633e0b2c309fc66e56074f17400f8d2c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e84aa12d83f4a6e18a86be0c9f4454b3accafea3f3eee84532d10f4c73a3d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27657bca7a64f829f6cf826b7608e7071e3de385fdba33f77f1b1ec3bce6e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76811 Malicious code in andi-brongkos38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551a71744e170e24ea76aa35aadefdae5d7e82eba7c09099ea67d56c4f3e5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bf716a08ca577ad97c5532a2a4d85da58997c502ed585c8f40648f7dec5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cda9c18dfe467bccf3a2acd87fd7cb47aeb227af62a73921dc18d4a1cf3d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klentik84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8043622e50b2b4f20b10bb3d4fee01f2d252c70a25e4ab9f3428a3b12470334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a02955230ceedb92c2567ba4e55e16ef922b85f72e38e21bc8f4e1bb36cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac4e918aa0990da623f85b1de20ab0734d9c8a4f9be6052b0640122f05262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-wajit53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bac7d8606a4f4eda677869944853c63a217b9b64d502d4f70c51995f52f1698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-miemee69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6a47732e27d25447ea7c723b573bbfa1191f6e5c366fc91edebdb6a0c79ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lontong44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b1c9f674033d0c836c65c1745b9b68fe6044ec42ff81a065fcce3c87b10fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ragi16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9baca396a0543407c9fb4e2b830a375afb46eb39c297e95e602f5e4b7d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...