MAL-2025-128791 Malicious code in nadia-saguer33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d28b3e8f4128ed37d1a9e108b3c8ca9fe2b3ddaa90c5b3301bbffb32e66eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sate3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbf323cd104502754bc436e371fa4d0b9012e522189cfa8bbcf92fbe2b7f990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dcfb8c19280e200130e9bb2607b469a4830e0854b6b9f638ef845763d0d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121319 Malicious code in kurnia-pecel72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c658059f2605b66b08361aeb9fa80ce60b9ded3c9022f3647f6b4b25bc4aeb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5358ec5dac882f5697d342a2bbcd5eb1b84b4618a07e181222a9011863d57eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124579 Malicious code in yuni-papeda78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8ed882aa9f2156b5acbca0b21e5f4768e0e8f941822c4bd5b453d39b3c4256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113859 Malicious code in fajar-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21d515e15944163a5d6ca38b88f03b7afa31f750ebbe446baa2d70d0b63d322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118245 Malicious code in yanti-mendut35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d8d58c95bfeaf10f83dbb60570d822a2579b7cc91f57aec5d60294293fa255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tempe31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099dc43acb01fa7f7b0101a94c127b1d1a3ca422e1a509121a67fdf5636fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111775 Malicious code in cuddly_barracuda_fuchsia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0916bc1d588b00a01a6a6c7bd78806b02ea0c25160b50de183a21f34797206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109317 Malicious code in supporting_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcb7b855392dd000cc5e7e9a570a8402bbbac12e8739c173ca1ab8329d20db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sariroti-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f6773e5abf739feac5c95ac6d59c0f7669d2a18ee093ed539ca28a42b394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abd90b48b594f95a3f9d2d894934335a8dfb450a2f8636148f1d3d3d8c9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102661 Malicious code in federal_meerkat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba25ce99e170abd7429a88ef7fe82e04e75c930a343d06f0443bffd51f7fa7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100127 Malicious code in broad_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f366d50ca0637e3abeb31ce552ad3608179c06b5a757ac74fa081ac8b261db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111071 Malicious code in xaver-mieayam78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420aa89ab837eb2501e2a50ee2c0d08fc448e469051a662827d956f799165462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107573 Malicious code in qori-jamblang90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf5290ee83d748882a25d56b64eeaa936e38f237c2cf3c262a407acb057295c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107617 Malicious code in qori-tahutek6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d57789a79e0d6a3936e3888d38b7cfa5549faeac671b82a0b8211ca2e721f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107533 Malicious code in putri-rujak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce6b80d710663b5e138d767fac3208e6c4040b3d5d31ad71c1519bc96a5a7e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106695 Malicious code in oktafian-rangginang91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff30d175c562d95e912d45b49cf623d241dfc207de7ec86a6b7ab6e4280280d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...