MAL-2025-88137 Malicious code in mahesa-kepok42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3155bcb21209eead77a2551740d86101814db3bb4a972f349fb098221f3c6a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-takokak56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2bced59521eedbee552c18c5087bb505c29eb203752d74b1769a0923681777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-serabi57-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7f791329303a09242d8f2bbfe751967f0e7c3b15fe3fc5737697f40c7433bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-nasiuduk55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69616f6a0cb8a313b79bf23673a7e631bb57f5cab27c3d13a49fa41ba329a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue18-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b634c478812df0bd09a7932c265091fe45c336a2cee7b79e4a08ebed6e39154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-serabi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1497c95377793c061cfadcf9486b7e69ab9d5c9b29ed679204550423730c5323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-menjes69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfb8a723e1d90efe3fe3a1779ed57237f8d003ecbbf9e222b81332a3b5dac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-toge93-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bd657083f6a3f502036bcc0daa9e2c56270167ffbafc4cadd34d7062cd1189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-buburayam13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859e5e17bc08778e2f5d9f81eb9151b02042743bae59173a9dd12f1e1f934e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-keripik13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1a941c065b45db2c814cbf15bd671f2845d9819eb1fce7fb150cdf7a59da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-getas59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bc9cedc922710b49d4baaee1f1d00d62b4c3a913db3d3f6a89ac58784980f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a20a9178a74c3d36a8ad854eadba92004f252641501a30d5cd702e60ef359c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-jengkol47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00318cc8abac24be1c1a0ee78c7d5548f2c43b38265482178b672f05d8b247c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff41038b62bf3f97f957476889b44dabd50bb187fc5c3f53e4c2b1c9c29b0901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-nasi50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fa8afc55156caeae800bc82e789703a680d9704cfb306b9587b89dd80d663b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ikan63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56fd42e306fddde4077e0dd2194de3fe984546a6714a6c353f24f0f18700b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gado-gado25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a57bb4668597e6f746bebdb2891574d88f0435bdcfa1e19bf67b9997f9e1b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-oblok17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a24370757899aa7eaeb810d590cbafa74b50a649e650d4c9bdd6af7b92fcf2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37863640f8bb9190b5e2a2a13b9e57adcfa13a1fb7d0749baa8ce35e22439df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kepok98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f56b2bd6c951a07c702ec6069e000d929799061bf1eca4b5c134244ee224550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...