MAL-2025-60934 Malicious code in nervous_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7291a615d710e284e177102b81e013c761519ecdff4fb64b6662b1b95b0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue61-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18828fee5e85e1d541056fdda95ea523b5de698c5eaaba269d161204defcd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-ruwet63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94413287ae79846fac30f87d95231f385f6462d8ab1aad37582772ec27a4c085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kripik53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2422093eddcdb07213ef74851c4563f8d0421795c41ab08319fce1eb130369fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sego5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f39c313916ffa0a5618d7482c921f086bd79e4d2563b2fb1bb29609af740d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-saguer99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51585edd1b10413e893984b8734f6e594fdecfef0866e8b29b90eb2a53f5fa94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jengkol47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c23d76a79d5c5390b9ed462d949af3e3edbc1de902865e668b3c0c8760ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-enting23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b714576307aee05789da22338ae686b60ae9d6c06865e8f91928132da5c453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-oncom6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1852ae0266231e83706d7e9b026a06c6d871a588a61b8b31db802c4e29b67ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-telur2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bb6943edd60bc59d667b5d6fe47aee9e1415e48c357adba1cf3b90f44f260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasi68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b71a89c4c228feb3de8aa7a0a7f6c384641ee222c2e9c9e4e829ff3e395961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-asinan97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b6a20d6d3218b3a7b2fb14cdca2ed66f04ea01b9e14b73d70a6397be54edb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bb1d6bca5bdceb7611fb1b6750ecbd7a37be91bbfa8872394b76a1c8d1d375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lapis59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79ee36a233e835415eace7b983ef332cb08f3210e554a635e67eefd938c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c987608a968ce9f7796a0c9d90d896a83d654fbc1ad856d415bf336939d74d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd879709efc964588a07970270a1286956f52da03050d07eb2f52fab4e3d8599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sroto92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a1c409baaca90f88fc8e76b0562182b16dfc9a2bdf5ac2a14df69f8fdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb1d545304f56f38d14d034031e6a4e2d9c9d2e518063d7f2968141eb9d4c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-nasi47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79afe5abc0be17322b4b8ae69eacbdb58d89d17c736362e6e8abfdc3729a27d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7725b833e9bbc4cce72ad274c6ab49611f60713070a366f50c9445d71ef7cfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...