MAL-2025-133216 Malicious code in erwin-menjes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8943d0cd16b6dd423d498ebdd5f420923f17fe758f7f5678332911f2d260dedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134145 Malicious code in hendra-mendoan25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e674ae6d3af38262183256c0a2bb0f52c9558823bec33e8cdbea4ea3b63f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126614 Malicious code in fitri-tempe67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77694de56e003586b88e06c05821ce97f36c09eeecfc2ca5557b74e1738191d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127247 Malicious code in hot_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ed76bbb47508794d1bd9b723f96a4a27047ee1a6494417ff1643fd60e908e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gaplek36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08908a1375f9351c0be9ee89220190080dcc7adc4c081b542d0084d7216405e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-saguer33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e23ed97481a2c9e27c80458a4b897f117c876a7b954b71afe0c6a1ada342b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128810 Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-tahu29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882f4bd4c35fa69f6fbe500b23ec224a92b61ac67a1978b6fea3efd9fe2e3732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-brongkos52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa465d5cfda6dd5c4cc9b3a4bba001ed0ae0b246ef5662e1cdebb055ba994d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-dodol84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e6a345d73e243d7f1b286f5229a49222f16b976fa08bc640118898984ac06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lontong35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b18b44aed02849ad86162714e285941732ce84e5576135f7391d33c795a7f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lodeh89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa1227a35521dde31e45720fceb2ee7cc1e1509ecaf6fe5ac5b968211621d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f34c3de1fe42a1f0b08a90224f508cf7375a11b8ccab9cedc04aefc6d0cf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupang8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcb27e4ef2fd0a36aac3c35f986ee8eaae11250a5072611653f6e166c788983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275e956b1b9762d89f85097342c725b518a3803b35660878d6d7b39526ca92fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2057e34411ec21385a884c5816152e4bb75db3b18a40d010a1d4f19236cd28ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119763 Malicious code in erick-kepok86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae310be0334c98793fa54493ce9d42d52f9533895255fcc24845e855f4b58cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-teh88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9a29f366deea50270f07b28d5fd21aa8346ec0e7209ec316a9dc9a23bf4759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-keraktelor2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf32b246320dbdd23e61aa19b8ec96aa78dea419a4eeb3d7d5c35760b245eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-soto67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb1a8213a0c6f79d09065c86ada5fc70f9b93c2ce270f4974bfa3e8eeb7beb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...