MAL-2025-58883 Malicious code in tania-semur47-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093d7628344ec83f9545353f8ad7cb5b885da4bde955652a8c8df55f980c12ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57678 Malicious code in mulyono-nasicampur15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbebb3dbf403f7bdd5f7fbba4abfb88552c1641674584214eff319a402bdbcbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56791 Malicious code in ida-tahu89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162232c844e0264505250971a4f15244c7a5ae3040e1e82e375abeb950fef131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57282 Malicious code in kurniawan-soto24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb45d6427f2b5315b0ba9d29e47458fe52428b2bb6a21a0d10a5cfb65b24a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58588 Malicious code in sari-enting3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee15209f33ce55bef0445365d190f9966c249ea9b36b4bc9576b9ec6b54bbb04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58985 Malicious code in tomi-rujaksoto96-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6dc19de5b1721fee1af90035d722493f4921539deb6d126504f77510ea701e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57150 Malicious code in kiki-mieaceh93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1523e763e74673bbe379ad07bdd34da9cdfd0e02df9cc9b27501954425a682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56583 Malicious code in hadi-kupat25-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eca7f570d349e8bf2a60a39b7cf19868fad687009011e281efd0dbae1f95fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55320 Malicious code in bayu-bika43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7beca9c619d232ab85d04394d397c07808cd7df386341e94ee7a49c8b27ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Watch out for Walmart gift card scams

You’ve probably seen it before—a bright, urgent message claiming you’ve qualified for a $750 or $1000 Walmart gift card. All you have to do is answer a few questions. It looks harmless enough. But once you click, you find yourself in a maze of surveys, redirects, and "partner offers"—without ever...

Malicious code in siska-donat54-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91b55cb91b3852faa2ce645c5d06590a2cea0078c8cc45f6741c9baf55999c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54194 Malicious code in patria-tomat74-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b97cb3743261c42d85969f0dd7e5b8817ac1758df2d585b2e3eb182ef1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54274 Malicious code in putra-teh4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e9424aea05d5d114131a2b7230bba2330608d04b7d6ce18ae0daed7a541d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54632 Malicious code in rifqi-miebogor68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef78ee894c4f2cea0bd31308ce995daaef67a6e8939e169c23ffdf93f1a99125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54295 Malicious code in putri-empal78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b55782223c0b1d4553999e7b94ab9c6836c40744d3aab5991942059971113e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-keraktelor68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c2e544b3097fb5c120d03c255990f45608a5224a94eee22d7da747000d7849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52178 Malicious code in laila-miebogor27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d0fb66d6ebf23ce22d5ad66c7064c92b13e78305e8cea66f5484c61d13675d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-sate74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdb7fd471d08bdcd50dedb5765cadfe978535f474d20273fc7985fb91363fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-semur61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a7de1f1c4c91252e09777de6e76dbfe38d8c4780708eb6814a36973eb5b643 The package vina-semur61-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51157 Malicious code in budi-soto7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c274d8471b2b296c9c5a7694c2a4d46b2c66fc4d5b683541c1966a259a9042 The package budi-soto7-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...