MAL-2025-91873 Malicious code in vina-esdoger56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49e6537c2cb74b03cf80e43c4ace6fa7da2583f4914f38f1117b4d9d052c5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86088 Malicious code in golden_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315597e86c1e6dd16a21077932ee2eab49ec586c169aa2327a3689919ea406a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87718 Malicious code in laila-papeda73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822fe41afa952de123d0463d0ccbc3f2de4be9b8cd7769570d64560457fb8a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18120451bfe6d707dd7f86359033776648535c733a825fc19203e79933edbb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk4-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85bc621f519af14b4ab8f16f3d193e2ad8456676b36112723a3f6d1a04abc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-getas24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a1f3cc880e50c18da42e51632579afd2acf5509c46fca0a0324b94fa14a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gulai99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5175bba5670c86424b044f2304abd99fb85ce091d665d372d991f07857f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lutis61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c068f70fb6c79fd0273e3edf18707762a2a85ed1008c04ecfdb8ed5876ec6336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-peyek43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900f8a0154be49f0d4faaee2ddf2f4d371f616786092c869798019625a69d549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ragi9-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd23533f584390d52b128e6006387c2513c3cbf029365d670a49c8ea22d2766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f354db9a6cc466cec0c7181b13efe583d5f7bd8fcbca695bcda293450074ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-sroto91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79ba7ec077dad8e615fb9b9e56d4ee7c9cb4895b508394c16eaba23f2876cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-otak-otak73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cd215d56876fb93d2eacd968b753eb087d96410e5aa1c446b26546e1b5ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kupat99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97df27834f4e929c352f7ff0eade7ab42aeb1f97ceb2b1d263c0c7d6a6ce61e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-ronde7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d152fccf6e99f4f3307a491cba0f7608de189ef48607c4a721ebc7cb56aa4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sasag53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7b436a2bd60d85159911a6d61d3ba3f259e86ded45fa1e41445a42e714b9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ketan37-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128bd546b85f3471f53426b2ac30ad0cc90cc2aa82b0b1226c20a032bb9d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-enting16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26069edb74d6de2de3d73eaeb8f23692990d91dbbad13ffbbf674124113a1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-toge38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce82bf720048d2d13fb8565d4de291518603d0a5fb10215f8a824e55b626313c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keraktelor76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d991a722737faa2a7f20a0528ef4da2ef68fe0b3a8b2587e32083fdde64611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...