MAL-2025-96639 Malicious code in smiling_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755b423e9325c2cd5ee656050d004c5122d6a6eff2ba8935e3c6db74d74e2507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786034788322c1292956fab1e50c1b2b9c7722a51aed8aaae7f02c23e45f4db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-nasiuduk49-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4a31773f3e45901958e856058d1628f5019d52873d077f8746197829889a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tahutek57-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f98b9156f1c0ef6925ef9bba153ff7f3bf695f4853fa12f829c475b4ad496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lepet69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f0f6aa84e3f635da00e515e1d1dc089969770d471b14c9332efcf3187c0494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c673abf850fde950057d9a92c2b1d017f1abd4e1357ccb1d337c3469a8567846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-mangut91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0607fdbc3df0b6e29671ce708e25687be8499c805edac3148c9b09fbfa4e3fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tahu33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274e654c3becd298cd94716596ef11ab0e836842a234ebbfef2a3995deb2de5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gorengan43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4c750e8253dbc17a91dc7534d6fe696afb6a83380005daee26c9fa11c19281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-tapai40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3b241cdef88f6bd6a4cba37776f29ee7f79406b43b994121d82ce41172d7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-enting81-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81aefe4fac65e336a27829a1b52617bb287df3e35b92ab0c94925f71d257929a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-martabak7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0768c1ca56737efafe4ab1d2c0f847d4c22bec5a4642334368c6e0db95d755e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185dd8fa50b2bb9e6e94d0db19bafe491e649b076f2f6ee3f2bfce16a370d787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-toge57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937c7faaa1e752d0761b22eb8ea77a7fca0067a1811d9ddaf986316a1b3273fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-mendut57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311bc7e9373a0da4de048a3c08395012508ed2b6594fdb10a98a42d1813efc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-naget25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8d1594c939ce6cc03513e93a864942cd90e234194e4d67bbb69fb348a56120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-oblok16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a43bbf23329b824f9e58610bf22cccf4c67770e701df42411a498b4cbd98e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oblok95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f528d8ee703b765b19f5902fd31da30c33a376c87f78cd94aeea8de6da4a6f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubursumsum98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98572b2826c116ba536c94bf0811166e14885fb0cc22c749cd7b142858904efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kue59-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8af57b5fbc4d01d8c56897699eef76c21728eb827ff7ed97b338d150e0f88bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...