MAL-2025-107674 Malicious code in quixotic_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc203d2240301105054d21f9fed7ba7f10695ce6ffa77b239c065ccf3295d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2e50647e5d6ed6e18e33f3a09f2e7caad8b42505d3b2ad4a97e9ef70f0d59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-keraktelor76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a927ea47748d5f246761696bdfdb6bad3a7621532b00784c978a3c4a4a98fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-takokak59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52e065c395145900af0fba658c5736d739d53a917eb94498db7f1aeaed28e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-papeda31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db81f482a11c71f6e44250ea20a8c6968e08e7f5df0803d2696fa40b934f869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115f12f81911c5863a97f7ebc219a8aa2e438dd6cf8119db4fbe87c7cab6af13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6e9387e91df314f4cf40f8e2997305fc77cf94e789174f3936fa093f39036c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sate96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c42caaaea5aca7914e22165ec59226562859f6c956440c1172380d9218a2424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-telurtahu78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada31c9693596419065a37befa870e21657ad8623e23d17b7554d9f62d6cb646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-telurtahu83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909b580c5fd9fcc672cdebf555e9af6d60d9767395cc3a931fed5a4c8aae62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tapai57-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c4669a7df1d54b87f909bfafe58c2746853f49bb9618bf22819bab7b735ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9099adbb00c26cb27d39fe5b4d10f0d1f10685f8f868c4a258ae858d0abe10eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f53589ed7076315ad66bd9ef40682b835c9c8ab87ad983f9e454b74e3566ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-ragi6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63eed9c349ce497d28d2b8411c0467b780289b035fdd459623771fea829b0b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-oncom19-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fffa068088a68e7567dbb7c1dcf44b3f3001567984a4ddd62915812c0c8fea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ddc45dcab77ab9151fe0f1058c94d5246d822faa7a9c5e10f7433b52730926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-otak-otak53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8b6b1374459c60f75bfc05b72510a0a6620da3b20106f7826ff9eb94a6f363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kue56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176ccfb1b4650533b6aaedce77e808aea98810c21fb17093395ac97fa9582726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sego8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb52ec4e3d75a1a57a654e12c56b103fb3dd3391efc2293eec876e8f9c2b4e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-dradag87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cef50c7bcc8ac27c864ab2a9fde55c40d7370efd9518bb854c12095967052bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...