MAL-2025-90659 Malicious code in siska-ruwet18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e3b55e9b21e5cd658a2c99802191d2f69dc57fee57005b0fbe21f52ecdb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tiwul39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50ed501877c2613dbef9a612be02fdb3c8e5f881e18b969609e07d54c881a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-keripik62-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4630735a5da0e81959e8d2a2f08f3dd0f7e57954f0507c4d72121e25e049e91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885304fce1338aa60045e13c7f928d19188bbb81c7fe3f38173cc7c61aa58b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316980ff78d58266fc445aa223c927a13283d3f3891666ccd9260d80b345d2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd434c319ea88211e8bf88a5866e2c72ffc8f7abc712a7b27972b35b8c8912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-lapis16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cb9391c47bd78fc9775c894be4e7702cf9e2e77a426c8f5cf87f6cdcd3efae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-martabak68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884d1f242b6f8b958177bc61a1558ba7d343aa1c5b0263972cc78ae32da45dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911535b4298bc03e0bc1775506637c735ec70af09021851a10caa9fcf2111574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getas23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ffc32fa51b390d4d8982413f924c766fb89c2ec7f8ae2f7e1364052f576f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce47589b4a125abcee377618100517ebc85c807d85e623040619cad696120e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-klanting24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ad4035168c63892146b5acb327208ea1d26d83d4e08a3647805e8e69ab0a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-klipo34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909df74195d2a6ea87e496001f3bb38146e76f877a9d6494dac2c6718350be44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lupis35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a3b0438e368c7f134536aa68bc8f5433e25da05c63e8652470190cd1850ae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-gandul94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f625e1cef3953d79156e6f6293a566c08e65d3b54b6b5eb8deaa9056f8dd8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77496 Malicious code in dewanto-donat12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e11133101c41868495c3aa81963be0ec8784d42294333a0b5f52bffb6209e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-klipo22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fa70e4cb66d8614aa3f96c51366c3bdf65612aa6aa0aab6390e50299dfbe7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-serimuka3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd9b14b2a7a888323a42be4b827c3076a8cf67ca0604a4fea898a55cc6b8120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-miebogor93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629787fd7690b8f0e69de42dfe194cf35bc45df6c14096eae76ef02ee916994f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mendut76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5b3cd3864349e381086edf9ced711f7f1942a116dcd200f7a358c94ca200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...