MAL-2025-86978 Malicious code in jaja-mangga19-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2febe47809c1c88bc2c453472f1dc805b919f655f8df988df647a19fb43d7046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92672 Malicious code in ytterbic_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6b8d64a5ce89ac8f754c6e860e50ebf0ee0fab402e5376e3d3316cf37ea0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84671 Malicious code in direct_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3095847d8cb8ed6e35ec453c3b6a5fc43c9f36bc98ecbaf4f8d7a03df11d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84548 Malicious code in dewi-sate34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64308cb75cefa9f53f5a39fc909a190b7aa8128b8a7fcd59ddd210628e34983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-klanting13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3ce1a1a0bf48c250d79318eff68fb3b8349139a90ab4708fda78a37b81fa47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lumpur48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee99242632a7be0eb32b1a131bd2dfb356823f337a021b73d5e35bd89252d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kupang70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f23a4b7820146a6c2e22d2292915af670e63917e8c55d824a99adbfb320802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6739a178af8098add5d65d95e10674bee2ca53c40988f01a4814ff77071567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-gembus1-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ed332ecea05334ad15abb786c3bb19b0cf1c4bf1b5be4177c61c2f7d3ed3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasipecel63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0be2c712806e75bebbcd5bf99ecbc8c22ae9466d648372f7b6f4cee19c03e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44f0b1d7b5621d6f2569b546f8739a7c8568d0fe39cb89683803c7e39d3d635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-klentik84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0263ee6a66f1ab8d119b9a9cabee7087b40400aa9cb7433a91fbf2b5358aca8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d024778dd74cd2f033cc60bb0563e76d8d815d5e91fab49779259c04510181f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83739 Malicious code in budi-lumpur83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2cf6ebed30255049d409000619fd71d1b5acb77ca6b21e14fb41f4786b8b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84765 Malicious code in dono-ragi20-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9778d2008a102dfe1077b07a5669d8293474de6df5dca84c633bf46c75bd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91717 Malicious code in vera-nasi25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d557fc57d35453b9047f98f1d184e1121b2bf15e51afe5dfd2599a43cb841658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85494 Malicious code in fauzi-brengkes51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f953c69c46cf5169d12cd9dce11c96651ba6c70f79e8104737afe72e653f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89956 Malicious code in riana-asinan12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9a7284932d43307bcb1a95a0f362c590dae8fdbc0abb76fbbb944cd71b33b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-empal85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac638b88c716ebac2754b36a316f71e583ba789faf151c586b7143a25e62689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-telurtahu28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aed0c8dee8f08fc870418787a6fe5a0425c5c3dfa5a53acb693f4b1e6d16a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...