MAL-2025-90771 Malicious code in striped_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dc8b5c0bbc136268aafdf2e458fd620e4318a967f3100408cb920485111a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84961 Malicious code in eko-kue47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdcb00ec4e1e8e35febc20239c24266c3f3feb9dc359461898aa78534952471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92782 Malicious code in zain-keripik7-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dff79e2757be58167dd5612ab079538613ce9464ceab9130edb7490f1350071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c229fe70caf54e26772c8448eb5ce1946c234140456e8e22593e3405e5ad97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-oblok40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40cdfcdf85aabd5b9de238e970516868df02be6fa4a387ab2ea7c1ce1ca5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kue20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c437ec774fd8ad2f866bf6f363213167176bd6d882cbf8f151e7e31a512382f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-moci26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a8754711361ddf216e7a97a3b6bffb2310161ceec551f887236a7108b9d6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-keripik63-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5421bce24d348e418b1bece3a038f272f4ad96245dfdd1ca6c87478c82378ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-pecel8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452fdf7a9aad9764811c00c6b167c2fd7ff6f3d8d8c339590c73226305c22168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-kue83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259b76a5928123d742b1ef32a4f83381238fc9721e0f9a01a3ac2f6861212ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54ce32866d38f5bf87850721c4b0eec34a10035861f96ea0ac4315051018c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-otak-otak56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123375cd7f5872ba9f02a5df8a37237a025f994ee64e66d34a856fcd87b53bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sate71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7edbb3d7e2b1f51c3ae783822fedca65327d9a0393ade6e8ba5ea8708218cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92082 Malicious code in wati-takokak29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4763dd8ec929e80f5da89369a217c31b25a143152b661b39e46161d99566f297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84098 Malicious code in citra-kue30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b7212873083c66cbd0753fcd1abdba17eb55046faab42b1c87b766585c8e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91344 Malicious code in udin-gandul60-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7de3a399dc461aeb158b33cdeb8700bea1900562a71fb70aa8e5867362d8a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92918 Malicious code in zaki-ruwet34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590644e639848c7de4991f6a1cdb5ddec9e7530d8f86277ed19053ba8d9feae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rangi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ef4772f2354b962863eb25e7c9cafbadcdb65e0e1984fd1923eee984387339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-mie82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2121fd2cad39c9d21270633c8da733897fbb6254e122df8f72fc73775665599e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...