MAL-2025-124263 Malicious code in wawan-telur39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c236cfcc814f134b4114e19b923dcd757d19c02dd2092544524ee2c291a3c0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-mangga60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e70e3ddb51fda0d4266cc3beb208a251bd23fd04f5d7b18ab3720648cb460a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115704 Malicious code in maman-gudeg62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899550681fe868115847e86a2153878eb02928744f24ab5334ca91099911fac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115499 Malicious code in lisa-bakso11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b75627f6d9502f5c8e29d0129931eee12ac8cf3320f3749fbcc5192f544a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_ptarmigan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1f4efdfa573004cb3b49d99bee5ef6f82c413ff4677b7345de4f6e38bc1ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucero-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504f84d1e97b34d43dd0a9ed513ce5c8454abde1066431965ce33b321ad4609d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4a8772685cd72c9e749b9bcd5cd7571af1c261325bb7f935d331fb8711c68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102478 Malicious code in fadhil-lapis56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a865906e480c0ac9ec60fe005855ce91c5db661f177d8c8afb01541ce774e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94805 Malicious code in heavy_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782cb500ac85f6335a49262a7be839b39424a4f5feec36dda9958cf295b80f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80089 Malicious code in mulyono-toge69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2e5a67f4714c525be26c18ddd947f261516be0a72290cb2108ea0a1141e416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9da6a1c8a9886576dd0b51e6b4d03e8508d1a035ac896cfc7e2d7f1a71bef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61769 Malicious code in ade-sambalado72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27127bd8109767e5f29a25798ced5c2d0799e1d47f62fdad2bca1f92fa19cfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...