MAL-2025-97082 Malicious code in unable-copper-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414634ebcbc69cbd5707d40b722bcd12714e5ffba6be8d45dab0d0e90d7b92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94755 Malicious code in grim_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c93ee0446e107c94936d837f22623bd79c40ae1a0cb6d2385f49ecf22b2012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-empal6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eef2d08928e16545798ee0a9eb5861e5104a9f6905f047722f2388045a0b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b03292dce7b6b9fc72061b383a82db7c1868ff70e6e25c0085de287b7447c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gembus6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a491ef27c50d67cd5a88853b7a763747cf86f06f3d91fc1cba3a821d35fe07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gandul45-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa6c4d836a37eee24751ec45b24a11f255018da7d753029529a15e604cd7cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kupat48-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cb93449c122b545a1e3e45e5f24e23c5b2bda9d305885746fa785b2bb65dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58076d46771f0ca330364aa5b9662b3df254a5e9a67c03f47246be0e7c556d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sate47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a276418de38028b27ac721c1215d6e1ccbeef8b239066192c72352b23d076772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-miemee40-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d00cfff0ac7369fd2c7a17380d3f27142f2a5226155a3c345f9f0a5f8f5ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lodeh23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c35859fb4685ee11c3c6ec6d9e111b21e0f29bcb99215c6fe48d747db724d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f1aa84f8a3f2745cfea76e02939409bbfad36cd620b2986f776cce340abc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kacang25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469a738a0e6800af66ec599417f15f21110a46c7b6233e72bd1eb5b08b48d552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-oblok75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ec8342a5aa73121bce8c86c08652f313313fdba58fc775b45470e8f4d14d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2696a30e82c0d580dfcae7e91612cdb8a11d807a2728672f7bc6140f57e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9dcd15cca474558612c2254af59a7677af564d5356abd76c2ca7972a5d15c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6c8a88570c3a0ff9a737bf5fbb9cf969a82eef446164a96dd2a844406ad144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-telur92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a830037f2ab524aa9ae88602b8c258b95b7f59fbca52b970b5935df0fdbbd9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lupis13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255f90b7cdf59d6e0a853d2537c374f25fde9607df421ece813dbabbf2ed5bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-pisang98-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e397c47bbaad1ac59763c2a9abb2b4a72eceb043de1c5e8efd97553d7bac2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...