MAL-2025-137270 Malicious code in thundering_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0a50b8e1878b47c7f764e04101f3e59a4a54a3e24335ecb66dcd6a07d7c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132884 Malicious code in dono-getas33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0924c3653d1d8c0a38cd9d5af43f4d579fe81ea4d7f7e42424a427edfee910e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137170 Malicious code in surya-tapai5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6963b7e54f4cd502e0135a86a90eecde20e78bf831659ee4a96e3b4b2ed819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136852 Malicious code in sari-oncom25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c85661ed384dc0a4f047717e85926e3d64d1013da56d9e31482ab1d3651e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134381 Malicious code in invisible_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a951f97a6ad1e2d417b128020bca25d48b9e199fb204fc599a3ee9b6c9128923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137988 Malicious code in wawan-rawon50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed24759e61dcb5bdda28f45a7a6238c4e1db5738c3fd2ebffd4860b3876f7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138411 Malicious code in zain-klipo91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5085fece330cd57feca07174f90fea304a3f527ba794b861f7b72e68aed6ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kacang76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e1998ea853423761a4192fb1821085c48deac82a29661b7e3ac5105d897694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lutis34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1231629700f3eeb36fa1e12b66c4496a8da59cc3791ab77ae88637b28e0f5f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76056375238c15cd2e104a57815c9f4caa7a2941ee74fdb1e2d217b6aa5a0025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b723a95e3845b7ed01ac1ce49a13af8e6f7a3dc7de1be0133bd63bccb0d325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-nasipecel100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ccc80267c292a1e3ba4acf0d8681286e441a62127907f6df1951acb7f18840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gandul76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b1a5068b3214cb2dc857f35fc5920e734e0d0c5ca98ddb55d03a52f07b8222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kripik77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99573ada78235102753dd9627d288af2be278affb0f993d92cc15fcf0e2d8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-pisang11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ac2a5a44936131bac2fb2ad3df0b8a1598bbb8946223671f55b381c3ac27be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbed_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f4ea6ff71bf2ef2f55f36de3a2a07ae58c4d5ed492a7a32d2dcab35e933ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tapai48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f766c202538557c73e62a2ba69bcb7233832a0f5568943617b9f246f71158c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-semur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a06e103bd8f13c514b90c6335e936ef056554750895a19184b2924eea7ced00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-moci96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e16a69e0d5ae5cbb84a656130fff2b020087d1f48d94906223a340c2cc8541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...