MAL-2025-87128 Malicious code in joko-nasisayur33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ff70db291539d246b4c705993a40e678bd03ab31198af6bb5f7e5df190b706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85471 Malicious code in fajar-tiwul9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25dce4e10ffb659c7666a62f7c52a4337d64521c6951412ce858c908c6c1657a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a64b4051e8bed9f49434086d75c48a8b0b4eeb833b2ece89bfd99994d37eea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lapis61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2bdc998f9d19837f40e2277058917fd3e2fa5b749f22bff451ccf4d3a09b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lupis88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316e7a3fcebeb698232008e6195db57a61b5c4cadd83150e749a7da22f388855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-rangi11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf416ef4ea5e05c97d1255597f787b94f796787469a2b00c0e43cfd62b73220e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-brengkes18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14eaae771794919a71308e45c95f952b1785b9c41b3c9a76296ea8b310041ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-semur38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59011d955b4771ac8308b0760623323e78b94ff04651769df7f87446011a5abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a157b84baf04cee5762d5907331d9c17194602a48758a27ee41607fd158d998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-klanting3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0635b083baae9e7564cabf74eed9fa20caee4c80f77bbc028f4f61eff24bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quintessential_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681fd0d32d6f413e387294edff6f9270e7000c887f73b97075dddf9dd0244379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-rangi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff846a3be289e0e5a55926097b4cd7d9160d0bd940a62e82d96fab6f8f0ad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-gulai36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aac5668c07e78227f921dbde34cbb2eb08a6fe7c4672d8553e0385d945103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fa39ab8834a61ee1fdf8175476f49d9bfdfa24a4a168704d95ea2022bb6299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-klipo35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06961dc0a2245dc65b70b9d15cac9407ea44fbad2a47fc8e47caa332803484f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasicampur51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53007bc88f76e4244f83db715aa7f06a25940ba512f25327d0787a646061aea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb4d48f402a79278af3f9a2f99a37a131b65fbf4f08f0883b3d618ed9aa9cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-martabak33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306ccf471dbbb214df0beec39e3a50b5e4e028375499337ca1abf206f85193a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lengko81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11103c888ba6bffd1851d54342ffa907a5047b0f8eeaba194e5819aad72c0260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tiwul3-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845fe4a41b57b6514db7b1db6f2b35fde0b05e16d3e522c3ddf6afaa318e219f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...