MAL-2025-138037 Malicious code in wibowo-kentang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5127b4ad1975a085735044df86eda46cdadc05f3f2c4b5a9a8ba2d202c128772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133939 Malicious code in hadi-jus54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e10f8f1237be16fe0d00556e34d049653816cfbdb032cdda530b295560123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135254 Malicious code in lisa-sate15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6d25659c1ddaadc038e292ee2878fd70d31cf78a28b2a0b77236b8ef66d9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135488 Malicious code in marked_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683dcaeb253e3199ba1d2e030aefb51f161aab335186936dfd012de9d9ee932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134360 Malicious code in integral_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91eab438ef4c77e1cbd041c0ad7b5adf3dd14275dc9ff777d0595058a534622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-tumis43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e5df5a6d444cbe2dc09e85f8bbff0e2834024303fcf4ab4f9e6c21a4649f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gulai32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc845967a01f82145ba5966c9c8ecf87062833483f59b0e9a2d04300d6888736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-mangga30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a5de7e56f232747d96a386cf1b8c70b2dc4fc80efc5786352700bad401c486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-semur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67ed1492b4737142562001696e7617e37b3163fb515f6172b5394cdd6384381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287f5f64e3d272e229804205853f8b66717d66d77be89cab4f832acc5c670475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51eb5b190e91e6f53a1579915004a006f96f740ff4340c9d3a07b3eee9f177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2477c2aad954e996a3e2d15943b44cef8df82db75bbc3ac78fc713d834d5b474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-nasisayur70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d843e48b6d4b94ffce7bf58ff2c80b1274024a456bc6149f188480931eb4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a7b9e6ba201c7bacffc22d028d9ffb1a53eeecb16fd421936d445cb81d692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128662 Malicious code in misleading_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339b9a7bcd5597707037ca90f55903f6a3504dfc144acfbc24601247d7a9ef3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127625 Malicious code in jaja-pecel37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c1ff5ecf14bd4f92769f08138ffa9584a7daedbd8141c557f7b1e51f58d02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128291 Malicious code in lisa-lumpur25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ff4310867130eb7ff803b343a89bee6ce4d6a014585cf468552ba33b265c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128632 Malicious code in medical_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5fabbd3a6664118e3f69d9ff3bf4816d3e04be706505a42aef0eaa160f580b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128422 Malicious code in magnificent_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebaae3196285f0d4ec1c1ff07ee440d04fee7a4cc2061499516bdc969fb77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127704 Malicious code in joko-keripik88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace50fe39e782666808954d09eec65a6d467ca01006302eea78bc84e86c6e3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...