MAL-2025-78761 Malicious code in hendra-kemplang77-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f177c04408d896678032fd4304715522c059839c0076e515bcccf86a046b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mendoan42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba33218470c792a671c4cd0452358b4cf3884b4cb46beadbe26b61387b4e99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-gulai96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da738df8a29fe29c3c07ba3afc726fd3d1139e44392bf013de673ede44db4b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-plum-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47b21979d4eee5217f451c37e5ee4ad692e81b27906507e83bb9723ad7e4b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-nasi33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa423799c642d3135aa4af64eeb9520e563a873cb7a36dd3332ef89dcd4b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasicampur65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f944917ad586e894080a63e0672a5aafd25661e4f401df3fe6f501cf62b1b920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-ubi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575ad87b5484b5fc9652266c481597b8a18d6aed46694002e9f77d48a05ce41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tiwul66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6accb903508f8ecebd9ccdefebe1dc91be8a8f5079bf872d23a7f48b4265a794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...