MAL-2025-88186 Malicious code in mahesa-toge40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e91cf5065842d87b97507aa8c46d4e42e8619de8fbd2bf3d942e4ceba408b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89895 Malicious code in ratty_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f5b1d32bd93448f2329b09a648aa43a2abc1071b456eeaeac7fbec97aec809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86941 Malicious code in jaja-bika28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b096b9152216b4499fdd843c577499895e56a0aa011f2ba0c0229fcdb4a46c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-peyek43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900f8a0154be49f0d4faaee2ddf2f4d371f616786092c869798019625a69d549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ragi9-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd23533f584390d52b128e6006387c2513c3cbf029365d670a49c8ea22d2766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f354db9a6cc466cec0c7181b13efe583d5f7bd8fcbca695bcda293450074ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gulai99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5175bba5670c86424b044f2304abd99fb85ce091d665d372d991f07857f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8861bb8aa8ed9ebacb3a05664b814d0947c63087d9d11905d2846750845ab5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubur34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bb43e75c375ad1760b3086b9fe77ef6fe38e7fd8878645b6a1b8ba2aebff88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-otak-otak73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cd215d56876fb93d2eacd968b753eb087d96410e5aa1c446b26546e1b5ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lutis61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c068f70fb6c79fd0273e3edf18707762a2a85ed1008c04ecfdb8ed5876ec6336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk4-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85bc621f519af14b4ab8f16f3d193e2ad8456676b36112723a3f6d1a04abc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a430b4e508512c10addb5adad12c0a24121814c76d4ad40c22a65ebc9766919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-ronde7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d152fccf6e99f4f3307a491cba0f7608de189ef48607c4a721ebc7cb56aa4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sasag53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7b436a2bd60d85159911a6d61d3ba3f259e86ded45fa1e41445a42e714b9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ketan37-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128bd546b85f3471f53426b2ac30ad0cc90cc2aa82b0b1226c20a032bb9d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-enting16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26069edb74d6de2de3d73eaeb8f23692990d91dbbad13ffbbf674124113a1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-toge38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce82bf720048d2d13fb8565d4de291518603d0a5fb10215f8a824e55b626313c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keraktelor76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d991a722737faa2a7f20a0528ef4da2ef68fe0b3a8b2587e32083fdde64611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kupat99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97df27834f4e929c352f7ff0eade7ab42aeb1f97ceb2b1d263c0c7d6a6ce61e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...