MAL-2025-92337 Malicious code in xaver-bakwan5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f41438f012e9ed1b15a25f351e7caf0e45a731c3515af5fa719804d78fbf2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90054 Malicious code in rifqi-bakwan17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69c4b564c3f743332efd93928537588aa58dde8f2a9d51e1cc101c1919878e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-sego32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858cbd57386c8fac882202f3150444aa18b2f5a234193eec8a4cf7c478489438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e5db5e3d69a1459a953dd366b912268e420f3942944cf002308adde7ef4ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kepok15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a51e0cefde407ff74545fbe9b6b686291ce45caba1afca17752d416efedd9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44534bbd7b3b97b2011959c9984260800f576b2fd845d4f79dee92922555f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-menjes29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd2b647270394d347d35a9bc531a7be7b6c8c1bcab8f732e887da833cd064a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-bubursumsum62-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d9e9822433f15a63ba60ce4a642820b689234f077f7b24efe48ed18908b795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80728 Malicious code in putra-peyek93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb0c5fdf99239119f5c659ff06bc7d15a82c45c28f85c0c01f782afa7c708c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79877 Malicious code in maman-ketoprak75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcc2df5269c95db7c3deedbf8602c97066078e9fb45e2acb0c8437cef0d1e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ba8ffac1d5c7fe50a5b9c9ef10d5ab6ceb4474be168c85e226e39bac6f6c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1bc4a1b6fb9dc9063a3ed5b211dfc6a01ea960ac3f708dbbd79149089f5165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-kue71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118266e1adbeaaf913aff473a039f6ccd494fd91058b41f55c15041c61f97ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79920 Malicious code in managerial_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4082d3508c80f0f8ea56097f75da906aa130cb5a10923f1a1ce1fbfc8dc48d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81003 Malicious code in riana-oblok65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4e1fb948369d65b966b58083dc3b9a632d7339221351de0da10c02d162eb81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dodol15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ca44e3bb993c8277871b56e345ee04ae1c1a2da0389e1c9e3864d15fc96f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cffbacb7cc46761836997526046dfd38fcf685c7ca3d8e2e94ef2aa8b70212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sambel93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b38cf005ba32f0366340286b0c5e7b7a3d99ec6e4b2e36f93202f90f5e2daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44edcf7bc59e8b2a447c6135c8ff0f640519c834593effc54abf64b5a3340ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ketoprak48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cdf5da3a3cacf1706c3064edfba9e3a52493e5ace4f94a127ff841f1c09af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...