MAL-2025-136350 Malicious code in putra-telurtahu23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e907eda7b39fc04bcf1d4983933bccb732162857310e3c7c71b105a5672d5323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132654 Malicious code in curly_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec39aa44f95fafe0248a732f5b8b290c808329224bdf9ebddd4e724cfd4fbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134204 Malicious code in ida-asinan98-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e44b61d6079162a197c8e9180c94ddda85c91fdf8b62d38989c9b21e9a69fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde5a64040401b6f717136807cc0af6b97d4ef7706efe8ce017b0e869b1fd20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rawon80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf8a9af9b2b4d4ac24b2a68f23476767df50089c842ad62a74a6e492341f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-lutis67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965b69f16e0b9210848b9cca55f575362412c76e1c2a3c45a68f419c4ee212c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lepet35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7b633a5dd4b2ff843366d068a329974578b837a1d897c035461533655f4f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c898535517dd9b629fa03f172215388a97fad5915d5a5ed145d7e0734015d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7790a308eca0e4ada9c5dd9980570f77ab8c4bebe2b645e3f6978da9c52772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dc850356a563816bf71d8720de84a474486e15db72c457441f0fece7618af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-jus44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a36cf6982411d6992e5d9ceece6d97be17d12cb6099401407b431fb0a84b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lapis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4c3599365704f5fec4121cc874eb8256e18ababa39418df8f59ab5dbe45155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-esdoger50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec03624bcff8838de430127dcec594edc4a95fcf06055c659d7cdb339e8fa1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sego84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6e7ec33ecb61efad632b245e6699247fa9d9b8b8777c0a1b9c8edb3a2f68c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268331e5b9ee8a75fdca60c6d911dc27e904973ed8f7c04622b5948799ff69f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kemplang46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729be7d8222be168e6bf4793da92af87af3392d5690419b506a171f2f1b9f746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc3fe3453adf31dffd93596877420acaea268ce6425903a920f108a98109d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rangi96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5672e4976cb8c885892524c212af5cb88d7cd18062056cb4d0074b611d6fd3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7dbdd6cf5f2557a20938a79e0412c93ce0a181d5ea2e430ecda7cafeb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kacang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2b24b34677e5d50aded7b249212f55ae645713867acfe2e61aee7a69397806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...