MAL-2025-136242 Malicious code in plain_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef605a84f73bba8cf4eb7e0e48e5d63e628384f95ca81773468f77c7e43d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137321 Malicious code in tiara-serimuka71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6743e4104360c808b6cee706d38cfbd38db065051da1ab726b73343ac2cf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135714 Malicious code in nana-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ca921c0ed3b124a7ad326f458771d784989558f40ffbf51fd95a78ab7a9988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lumpur47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a484929ff99614c5a26d3cdbe7306e2382de740e1f152163e812c17e358ff2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c107a985e4c7fca8586ba98fecdd4589c7db003226b275c81bd9cedb22cfd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751ac02cd1c19b25415eaec9d1d75a41739e95d81635884a3a31df57100c2a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-telurtahu73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54dd41af92dcb9d6ecf8ee11ad1930cd6b63faab1d94c6a6633aaf7b1588adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-menjes93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91c353e0064068ea72bc9d9f33dc34f9d361c71e335ea5d16fa05662bda53a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89766d9682ff80bf9d1b51195b7bd7d8291fbebc3613c320d55db3b60d04ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-keripik12-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4dbe45dc61604ab72342e3509f7a30256e4b06756beec8034f20e47b74256d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-sate83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177bb5efacc3827e8c015288280de3f6af67f5bc5a943c078b5b4e4226170a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-sate95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d31bfd14ba8e487eaa776ac93ddd18148051db30a1adb1abac177a779757720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jamblang56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9052fce760d5264a168b3947fe6963bc5d828d2d0a0a4e7ac5792fabe6655378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64890683e8a69e79e9e6cba18a4f35018cc8e6fae16dfd380ed6bcfa18ecec39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ced88e5d34031ffa2a2fc3f30dee333ffe84a2242530c4396aeae92c7f2964f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kue55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb43ed1176e257448ebb60a2049dfa3a23571f1259fda7d03c70097bc52f0183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4835dd9c118e2e7572641670a114ab464450c6c17833f0ed1b9afe941a8f987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430d62b0c00207a882e4ad291c58e0ea699535a2639b88d0bf35970c2cf1097d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04662a1d864537fed4eb10eea8f0fc31bde6a4ff427dea53c5605e13e826f0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736642707097ffc7603d3916d6222dfb9d98ef4515b08b74651714e0081348fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...