MAL-2025-61078 Malicious code in principal_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22767e25e56166d2a70048c47dd273e8e638b52995ffd8cef75f03f01ae5231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb1d545304f56f38d14d034031e6a4e2d9c9d2e518063d7f2968141eb9d4c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adf3677d279835dea8cbbb052873155c0e4aecc6b82667a1fdff97377204aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-otak-otak67-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c216f181a5ed70f6dff8196cba1f6d3ed6ff1b6a855ebe963ef945821c73ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-martabak81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e46eb0b7c6c25617fdeb5bffba6c41e25adcd5477f3322b46ff7286e1f8c75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02578632b435cc97c5ad28ac6c49ca3481659f5cc7ee13129c70705b775849fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-otak-otak56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb197bf6b13644f03ff361e3fee6f8832ed0ff2293915b6ae992324fb6bcb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sroto92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a1c409baaca90f88fc8e76b0562182b16dfc9a2bdf5ac2a14df69f8fdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-telur2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bb6943edd60bc59d667b5d6fe47aee9e1415e48c357adba1cf3b90f44f260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f095e97f7a675c77981220a71023883b0246d98d38720602d13fc119453e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasi68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b71a89c4c228feb3de8aa7a0a7f6c384641ee222c2e9c9e4e829ff3e395961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-enting23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b714576307aee05789da22338ae686b60ae9d6c06865e8f91928132da5c453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jengkol47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c23d76a79d5c5390b9ed462d949af3e3edbc1de902865e668b3c0c8760ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-bubursumsum10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0db2416079645b59ed47efeed2e6affd24a0f6ae5f0b35965a9f9375fcc0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bb1d6bca5bdceb7611fb1b6750ecbd7a37be91bbfa8872394b76a1c8d1d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd74b10b7d4754ba9f4235cd844e8ac14202f66136301d33ca16db7038a99486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lapis59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79ee36a233e835415eace7b983ef332cb08f3210e554a635e67eefd938c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-saguer99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51585edd1b10413e893984b8734f6e594fdecfef0866e8b29b90eb2a53f5fa94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-asinan97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b6a20d6d3218b3a7b2fb14cdca2ed66f04ea01b9e14b73d70a6397be54edb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f245cd167d88635c85e3dc6047949534f625131e1492ef8147508fbbfab98c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...