MAL-2025-133529 Malicious code in fitri-mangga35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9641d06f0614921b402b24acd3140c2022a4516391a9bfe3019a47f6cf6775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134820 Malicious code in kiki-oblok68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1098a4d248a9061b55bd18a4ec40914bbbf51e0f82b20cbf54e071b3ac8b1665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2484cf4d838051766dc34d347fbbd507ff5768d3c96f875f173b48af0c230edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-tomat16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843b307524d7db1e976a96b39fc7af1d2e8a3581c79386ab24ba755c3a0a913f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lontong44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c970b9097b7e781f9a080580d02274dc9edaedf76f1d6ada9deb74d1f7f2628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452a3b68964d36e33e82dfa279d18e77c89c2816264cbd7c24b3d6d5bad46340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3ece2983256b8af04657270fde5d1fb7a72087fcc518de3e1f85945278036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-klipo38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc74c507c9b131b7fca1e4d63a0109f5417413a0701093f87d06158914c31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ikan95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0bcdfa2b8d7fc04614d7fe5d8c7f26c98d478500b1579b41e25de51cc2ad8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-pisang53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8797c6f06930c2a862df9dae1d3beb5f1a922aaac441283e45439910a95bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managing_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c279bf65fd47335af0149a7b9cbd6736259e6588e45b5fc055ebf015f7964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477c9f9a4f7c7e0c585ecb7d7274c879cebb64b5c644d86302f47845aa0d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sasag100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190deee8dc65f00bf9a31e3ce8f04632d3d3cfd256d8fd93902a32127dabfcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-telur52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167adc08575ed0b83620d4ce20386357f08b11ef8d2cbb8d6dd46c2a16605d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512080f32e1a68e9ff62f30764d03c52335074252581ae1dba987a9bb4c2783f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c882623a6f5b7e7950da6d70e222e8d3fef111d9a1c2a002fe112cae5144cc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klentik24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d35ce42845ea58c555c6653762947d12925865811cb372f7e3a682f106fbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51280b88558730ee25bb49fb78339520798d692a8394b63ea43f5215268d202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lontong96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6a719421bbe9b8f9d7380ca86d8ee834290b4ad27f4c7c5d6002b291e3270d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-enting39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988c61dcc097fa7bf683134032313c2dc63e765e8b4e1517c77a8853e75e4209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...