MAL-2025-118303 Malicious code in yawning_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470c90d5b79a559587a2f7ccbe19bc51a21233b21f3997d04ecb24bb79b928d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-tek33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c811e619fed25f63f3eb8163d6051c3b7ab2699d78ddde365c6946e2b08e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kacang59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76caf648d2ed0cb1501178e4bdac965e3f75a652440fa510ad34eec92bd9990c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-lumpur18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab572dd6f03c4cc116f435a1cb6c92b33d93d911ee1ce7e55c6b49462d006285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tapai1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a836d7fd94a5da14a6cd2c69436f2625eb1c0df57f21bea687569cdd2de42101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-dodol3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca073f4b8abe6529c149e700dff6fe31493bede7a696bf1559dd1eab62302875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ec8902a7aa1fa201a179ea8a4f0a900bcf7c5231fb79ec8d52267feca5fdf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-toge17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc557b8412ef7f544d3dfa8d1bfcff30097d1ce007c308e5f92ae7bee8e9ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-brengkes1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d6b85934e672e9a1ee83e983ecebcd265e869461b1000aa0df24f8d7633094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tahutek5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8aaaabf39a96bac3857207965fe61da1edb10773dacd05ee462663a6d38baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06494f66349bb57b905600f5d95590e93f7808e920f3192512677cc7f658b055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasiuduk7-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c49eb687af346aac8afbea3e28b56f4fd9bef8fcab4fd54833ebdf4abd4374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-otak-otak87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266d9fa53952eb753aa32dc226e2faf3357d268cf5f36e2da780e3e38b57ef92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kepok83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61240683c081ce02689f64349aa38f229d342ce85312a4da83d0c75944227f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tapai85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ace22424d55a42bb6b2cde92392c08834942c2da02fbe60a2d5a8112f590b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kripik67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0645dd90d12fa25dc36b2edf852927e19275b24e919be8250fc64ccf531988bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rojak66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e46e2ab0fb3901a54a5333e865cd97f8119595706022d90c64514ba6e753d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-bubursumsum42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381454b17370bf35237969e275fbc28749af09351b6c10c57954732a35b7b120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-brongkos8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6838a1ec774a447a542e464bc95e5a650bec2abe7976c9e1c44bda45db1a7f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-soto22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b3c9ae8a1c06e722b762633e6f0cb9eefb0b78fc614fd08fe41c3bb6be5621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...