MAL-2025-100138 Malicious code in browning-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b6ca0946ffd25570964d1f5fd6b960de2cb50654fd0ca6d780ec2e561b466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99803 Malicious code in bare_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b63ec7b65e464a0b1559279c070cf17c5d06d2c02a412a841e00fcd92ad947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad9c200fb60cb90b05febc7a7707fbcf55aa41bb148cff6b7bc9f474e81078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-miebogor7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae42a92b982c019d74e379f42963069bde130fa5d4a7296a36c96c4420bb297c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-klentik89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d30d2a898c1a87dbb5ffc3eee979862a02548056eebc058a9e2f3a8df6a8b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-teh66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130d4f70d880ad58ce29ef729415e30dfd1e3b294351765cde960733d5db0cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ddc45dcab77ab9151fe0f1058c94d5246d822faa7a9c5e10f7433b52730926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6e9387e91df314f4cf40f8e2997305fc77cf94e789174f3936fa093f39036c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-botok94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcde9b79380d127dc19c5510b5811ab2e1327ca2d3a7ff43659f2b36c4d3372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kue45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b487f9906e624ea82f6aa79b6515ef3a3f24810c573fd669b632e95f40466e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-oncom19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fffa068088a68e7567dbb7c1dcf44b3f3001567984a4ddd62915812c0c8fea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rangi82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55319ab2368fadac5c84a6c236343b677356498d2922c18536d9188d8fad25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-mangga35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa40e6f76e418524b9b56de6a763ab097ce61895c3023c88f4e0b5921e7ba90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur84-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84032a08c05656dbcd3d9db0a39881ff079b515943c878e88b9060e5bbc4e297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-keripik14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9f5ba4f6bee41fdac45c05ce881c55cbe7b4f43901dc9229912a399cef9263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-takokak59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52e065c395145900af0fba658c5736d739d53a917eb94498db7f1aeaed28e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37503baa5fe039d93e7064ab55e86668a01f954fc7e04fc1f0f52cd5a59facd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rangi49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4945600cfa28a4181d91c8cfb72790d3204015b8714676124fe8abfb7042ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sate75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5550ea7d5b314f90beb360ecaa1ef2c816e2b5000cb3d0b63d6d603c1860e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-otak-otak53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8b6b1374459c60f75bfc05b72510a0a6620da3b20106f7826ff9eb94a6f363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...