MAL-2025-102199 Malicious code in erwin-dodol54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eee823ab53427bd0c523b20d1d0ed30e43bf00a2ff4e6657e0b49bfb1afe0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tomat60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c72f54c2b71835d0d970b888912ae77d7c7fbbd74a856242c2875fa13575549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lumpur11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75a063ecfa78e51c33c78e4a99cc7e1aa704fcbfa81019127cc977b402a2020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bb99e0d086f4471b5518281ecac4937dc177f5692f6ddc7ccee0f54c604984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tongseng91-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ee36c1aff170ccf785d62f833721b30a52c1960a49fb7e98d24ce0ad165880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang10-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e851c1aacd2188e23f5a89b1ff0b727d66df821e2f5d385b535a652a6eac05e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98032 Malicious code in kurniawan-kacang47-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77476643aee1a6dd0bb62895e54fa9fe8d6a4364e09d723b010e3264f2d47733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66582f8c281d76fbae276aa0971745b1893cc1cb5e973d1b4424d6c02a01d270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ed9a779f2a0d2cdeda3e335499668f20ea4a1c83bd1a88c6b919dbc18f9ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a23c9dd193673db5818b2d919dec2e4e980e4addc6cee780c5297674b99e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e2da523af492729a3f4fbc57d3ad826ba496d58a431c7577a5433073193fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94857 Malicious code in horizontal_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ead2f85dcc97131e1564a857ddd8ce10d05089a5200d5b256352752f24007aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a2a318f538039f8a39aa541351a1a0e8865870c1e3de9567ac0397bc870798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234d0035082469528e306bc9add9c65192e1dc8febb8974b4c1aabb35712af7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-kue75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccee6d15992e5cc26bf04fe6d4496c4dc0788661a1f6ce7f0f1660aa5ce41a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-getuk66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902f792f2490fca218d013e3de6b150576ef16194b93f4ac905225307bbbabeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89961 Malicious code in riana-bakso7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa2f9fec99f25307522608100a184b82629f1e5624f87042736449876c093c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89353 Malicious code in parallel_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4563389900fcd0a1f8ab007df9ff57a26ea5595e7130cc955ca72d69c2708cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91461 Malicious code in umi-liwet36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bdc60b5f86dc1fc9dd72374cd81e427106b9f07d6c4cad2ab4617a913eae97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sate70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a91903928f46456e389578b0c21b16257878a493578e36e4fafb601e8c2e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...