MAL-2025-84904 Malicious code in eka-otak-otak90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88821d30c3a8c9dea922c883f428340f4f696eae74ae58ece8531d396acca2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92456 Malicious code in yanti-empal64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6906ff0faf670c18d47e50ec0717f3b81f5269bbd92b5e68e3fdc27057e98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90692 Malicious code in slippery_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9943c1ed172893c021cb45e8f0d68022b006a1bdca93b58d252075bfbad87226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-mangut82-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3505816f1f2cf0b2aa53e05986877a28be291866481dce4f31053dd334c8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87958 Malicious code in lisa-sasag52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2eced037f5a0d9cb8187846e7ee01e15af93d9f4ba03626243defd034d1538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83494 Malicious code in bayu-dodol92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9007b33b9cc05617f8e82ba6f374586023c2158c43a4861da875da77010d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84410 Malicious code in dewanto-mangut34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa7426009073760345a551575de86cd44875cbd4fd9757fd9ee6991e826904b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89087 Malicious code in ogi-lontong29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4920a041b7c33af69c7c1807164a0896120eb1a786aba427c569d5c616a5436a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88852 Malicious code in nina-tahu25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f949caba94e680140ea20f361d4ae9e9c116b6f73f6fd48660aac0328c6b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tahu46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f3fb6b1818a245678d109efe6df96f4efd6f4485f1774b2837b713b57162d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55493272fe99066ba195a5e9980a3269d73edbd7cdb9fbf0b790616cba965c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89863 Malicious code in qori-ragi65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63b9d2e8c2fafde7a3c1fef04f0a47b0efcec52896542cbe64c192c6269b714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-mangut91-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdebffe6fe16ec3730deaa7186f3c6c7641602bef8ff87efbd28ce24a263fe97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8367478275d0462afd22ad6b48371c9b488fbe5b184aeec71f1fbbc773e5240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-telur90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ac42399e55ef3a3681b99241a747e102f6aa4df6afad8006543aa2ba3a81e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kripik49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b88b563123121c427499334f63059d0b4084ddee5013c89ea3d6dee7ed840b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-ubi41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7af98ed6031570bc0860e6ab26bf958219e90583c5eccf58f6a04e78fcb8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-martabak65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514c8d58d850d3895d9c1137b40c9bb38f27a67669f01f992a5f71787fe9e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b47cc14ec3c5ff6e574582cd8a247614dbbf520ac7510468d4b4df942135979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8636cb7c78d7c92a249831ab020c4bcbd87f25188f5cb120065ec3ae3252f2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...