MAL-2025-89642 Malicious code in putri-bubursumsum17-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8db6e010eea1b72df526ab53f5ae4ab402aef30dd42cf852e723a16299a3848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84130 Malicious code in citra-rujaksoto79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f05d194640e05aa629e0fb21605f0fa55e8d2903552bf5f196d4215699bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83233 Malicious code in andi-tumis17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482ac8a204c9a954d93fe3b116081a3e6d1dd4320868c499c39c9c9066294862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd1099d1993ae8dacd835dc2d49812ede5d6e83924ba8bf4f5c4155e50d36f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-sambel16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f650e745182dd568083a2b3652cc790b65acc1149b74a68b93d556bf39d3217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7310c06c312381ac13b5376dcd17f1a5be061a71ca5b65a06cbc68812e9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kolak49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d530a9830a63af3de31d5ccce146671961d5b5bc360aaefa958227c85798b75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-telur81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee431b5ae38510f528cbf3066f650b60fa1e830f1fc17c8b6afb892e367e927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5019b4332ea51e655401b164ac702297ad9625dae8b5b1cc10ea224714d55ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kentang96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd04d62cd9a984be544774a17414ee48e9a0819ae614a450ed1c6c837275cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-keripik6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf41e582bbca0d9a135c0aae14214d9347d919954963ec4314882cf8007744f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-miemee29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06338550932187fb511b6769dd58154809e84350769d8ef7b102da3a34d270c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498fd1196a1bb5ece6b4f66b76ad5df70e4998ecb6ddd0181d0da59fe7b13fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-tahu4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da530359254671cd473cfbadaad69abebc347e0af5eee02deece101751b69cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258302a4146f6346b1b00fc255fffe6483db74fb0eeddba1040175fa5839161b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01309387f5e351ca0c046525052ba2ab6456694258fc61f15ba8f84d0ca997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f979f4eb153fd249042ea19fa70f529239d7fbf57c3e402d90261a781e20cdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-brengkes60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca8a822f340637c283d68d4f7857dd8bba701a57b9db49b87d66b1bff75495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3650ad70471a5bb3eaf29a2439a7b0b1b3b4983456ce0732390f10ff9cdb8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mieaceh29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8cde21307020d49798b406adacad7ecb0b14d0a85a187963bc9e58ea4bd0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...