MAL-2025-100138 Malicious code in browning-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b6ca0946ffd25570964d1f5fd6b960de2cb50654fd0ca6d780ec2e561b466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd72980f8595de0bad9d6d0b5c215f6fb292f2c5aec5cf27b851718cc0cb70c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-miebogor7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae42a92b982c019d74e379f42963069bde130fa5d4a7296a36c96c4420bb297c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-klentik89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d30d2a898c1a87dbb5ffc3eee979862a02548056eebc058a9e2f3a8df6a8b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ddc45dcab77ab9151fe0f1058c94d5246d822faa7a9c5e10f7433b52730926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-botok94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcde9b79380d127dc19c5510b5811ab2e1327ca2d3a7ff43659f2b36c4d3372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rangi82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55319ab2368fadac5c84a6c236343b677356498d2922c18536d9188d8fad25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mangga35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa40e6f76e418524b9b56de6a763ab097ce61895c3023c88f4e0b5921e7ba90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur84-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84032a08c05656dbcd3d9db0a39881ff079b515943c878e88b9060e5bbc4e297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-keripik14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9f5ba4f6bee41fdac45c05ce881c55cbe7b4f43901dc9229912a399cef9263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-takokak59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52e065c395145900af0fba658c5736d739d53a917eb94498db7f1aeaed28e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sate75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5550ea7d5b314f90beb360ecaa1ef2c816e2b5000cb3d0b63d6d603c1860e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-otak-otak53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8b6b1374459c60f75bfc05b72510a0a6620da3b20106f7826ff9eb94a6f363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2e50647e5d6ed6e18e33f3a09f2e7caad8b42505d3b2ad4a97e9ef70f0d59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f53589ed7076315ad66bd9ef40682b835c9c8ab87ad983f9e454b74e3566ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef69b82bf03822615136883d4c0a6bfd4d5a9da9c2d08c10e8370087baab7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176ccfb1b4650533b6aaedce77e808aea98810c21fb17093395ac97fa9582726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sate96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c42caaaea5aca7914e22165ec59226562859f6c956440c1172380d9218a2424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-telurtahu83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909b580c5fd9fcc672cdebf555e9af6d60d9767395cc3a931fed5a4c8aae62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-ragi74-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8b59250ea0db6e657b156d79b2fa33c7fff008728dd4ca5c4245b469a8c1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...