MAL-2025-120669 Malicious code in ida-kue50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73ec09eb2fd6ba4be72732d04fe9dd4d3b2cd558617fb104018b87716921ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bakso45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad39bf392654576593d213ea870a321642cba3aae762bbaf65e935ff9b85ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-telur54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6eacca5b8a1efb0321b15f04c544979603a889b50aac22aa2846a5c454d103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc7a8462a47fb963859f9413895c67d5458d1a886761b181c0958ba40d1f35e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112584 Malicious code in agus-bubur75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66190bd7c62fe7111d49364dc2a76c206678cfc9b565cc1cf1761f9bbccc2b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_parrotfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce10773c8dbba4db7f3658b4c84595ec4ea75038df1d9727b08b04367d3b912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99664 Malicious code in automatic_lamprey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0cb6fc6aa55f0639e62b3d59ca83188313f13ae4e545775b4f8ab298509e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111128 Malicious code in xerothermic_reindeer-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d5d437da4fedf99fffebecfdcaf1309428f5ffc05ea5d8568a73b6c991df34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5a646a3887247b9d77d87bcfc0eb39b4c7a08932373fb0514a91237f7acb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-brengkes90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99d2f20b224560b548e9db431def8b8c9c368e842547fc01bd4ff2c7f093476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108738 Malicious code in sinta-sambalado29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5c0b29f79fb1fca9b93fe19850b6ac3ebba89acc3dd1fc6ebe43cd3f852e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-ongol-ongol94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99c21ba24bc445a1ce068e0f5d49453ab4e1c23b09a276051c5c4e30a5bc7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-teh12-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2627508cd3b9043f72a4684227b2b7ec7d32c2a85711d8cc6d921bf199c306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83099 Malicious code in agus-sate4-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85a229d77e99fadd2e2a6fa4206cd00cf36b91e0c1fe6d4124a2405a358c2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88301 Malicious code in mammoth_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e64e1b3352c4af7e9dfbc1133e615d91380d66364114c826e543ac5f2758af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86035 Malicious code in gita-ronde94-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b8426f902ca8938b6c249a0962acbc6fe692ac02567667d44303b08cb453a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-rujaksoto7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709ed1a76f94bd8ca41d25182062878e764a339895e2cceef055fc79a4b04f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78163 Malicious code in fauzi-klipo68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03edd6fa554df6238e8e7dd44f87e1feb5a756556d3dfb1bb9446920f3c6a29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-asinan29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f39643fb70dc89036437c501f02bd724799a1eb8ab013450ed9fa43f311b70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-scarlet-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ef5d538884a5142d698d907a16cf12aaead038846c4f4fc07b106c341cad89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...