MAL-2025-105563 Malicious code in maman-sate81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2eee711dc3da9447a22f1da459dacf358a93fdb44c7f64b37ee0e393a083fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110882 Malicious code in wibowo-rojak7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654914035378d881d79e4b76934b6bb8c71fcf26bc7d042c59c43bc75e1df48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-donat45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b440885cc94629b0a47189720918681a629fcedd4b310d3d3607a90a5a98e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lumpur76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da44d980c6b842c3ef3337c4eb27915516be92c6f2aed310a2332ccc321e2c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91635 Malicious code in utomo-sate4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4cde09c5a5e48453c247ca5ea2a954e85634bd266ded4870b9fac37d657266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75249 Malicious code in rina-gorengan65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1447282d006a3b30bff084e24d3505986a9af4ba83cc1988d34197d338b5e0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74390 Malicious code in maya-gorengan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff8a5abd751a154a2ffc81b323edc039cf4db6cbfd4c4ced603d4e8a0bc9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70780 Malicious code in splendid-magenta-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93e5d888cd2fbd2a767ae8ef95bb231814cbd1472855088477bb4ca249a9045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed23ee92fce943f88bcab602db649ba9db34884a420a590a18694e85fc706a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0c3ec2e2e004c805d4abf30389fa120e765d83acfff4e7daa90b40697825c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59809 Malicious code in zaki-mie13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6de581c3584c91ac8968f7c8c334ac4bec134e802a46abd5798224357564a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...