MAL-2025-103911 Malicious code in ida-sasag87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8386b62f8a629c503c65b5b019caa1af3649a3fed4017b3894c4b69019da2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44dbbcc36e2477888423a0acf4914611cc99b7dee58875784f2eb91e8d8ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kupang58-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4dbdcf95c2ba9e1793176135117925a42a47f52feeb3d5dd77a50694003261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ruwet49-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5723f491cba1fd2d41f25695f5061a61f30044597adbbda6bc8034fbefa47ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4782996afb96e8893377211dcc6e93e2f260ad4790490d751766bcf66bae074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a288b3573083ce9afbff240922ab5a9cc96278ec834c441e7ce3cd30d0958dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gembus28-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851c04056cd39fb0033b904e39a19c84ef7d835a8b24a03ea0979d1f1dabdd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-klanting57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c54f480561b18b0bbeea720bd078efc1ce90df64a7f788a09c637bae079c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gado-gado13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a5af3a652fe66f2cf30d46e56acf616b178ee4d5c4fb6b352500a1baeab7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-rujaksoto76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcdd59b61f8e50811068f8bb8b0c6f8a8e7186f9866aeeab63123cc4da218da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-jamblang68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501e050d885b8b9941b05622dcbc220b91abde118099272ebc74dde7da705ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-bakwan98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4431c0b5b750a3a1f3de6a1aa48b0fb791656daf115138b29fac01886eea4b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-nasicampur27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b44d8266860a87e2e99928cc57915052bd5048b9e78867a1e78c7f6460d8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-pecel53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03eccd95687ad818ec1a85a4cf6a3cbff3ee9b8e67629fd67047ffa03487f579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6dfd7a0e721dba0b4778e856a2a8ea442197478a012cd9bec802c57f505074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-getuk34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270ce24d809bc2d60b74153228726ed13812434d8fa6946ebde12eeaecbec906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ronde2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6d417b9cc83dc522d6bb8b6f0b0c3e337ccc3bed0716709a456a5f0c6e946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kue98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ead8faa75a3230f2729d6bb76fb71dccd7a1c30b0cfe2f2e8bffbcbf07f818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-rujaksoto31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f863992380eb009946817f6cdf574b8e0feced3acbbcdac68a1e013cb3264a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lengko8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9de19ebebf6ac44078559f70230983846d82627d94e89cdcf025d0e9fe5533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...