MAL-2025-90753 Malicious code in steep_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7794b7bdccddc3922cfbcbd1c65f30ef1330e0fe898234134f690acb0f3816ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89781 Malicious code in putri-soto40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe52b45bc848559429a4468511e48fbc3894735c4a8104e8cfe86c40ae681f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86583 Malicious code in identical_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e360bcad4d83928cb03ed6dd66ac2e069c39b32d24abe217b13ea671e883861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-klanting59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afeeabef4a33d40dfaf24b2afda13a9d76540f8dcd1e140fbe5344f4b1df1919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-botok90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe89d0be1e930f33bae42d3d01a45b6f0911d78eaaa922ca20525268f36053b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lumpur89-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8986d8ee4fed753a41fa9f245f1ab27ea0511f0cf15c695169b2ca659c3ad298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-sroto4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718f3d2e7fc89b1a7c4f7d739cc9b4e2b47b00a93282f46d607f9675d6ea0d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f901ca06e4e62ad58a9bd20f6ebf7dbfeaef87eea3b898782919d6d6dec1722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-miebogor69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eeab32dae5d00c475c4ff9f7f2d8e738a1406c62c5e25697c17a2234172d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasiuduk23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ba2b64c445a8e7f4d29a7f24007ff464fac680d213c2678a051217f10296dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gado-gado56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7228d88e68a8f038c2867500843e443796be351d262d776a3e91386b9bbede62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fdcf58c38203e76207fd289e01e7201606dc0940e4c8150be681e565dd43d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-pecel5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271e6173a229c6dbd9056df9a8b4786e0a1c91636402ff21234501c568738f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dbcf334c6e18242e90735653fcbf3e16ed92965d1fe7643b18a6abb9364084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-telur37-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada4fcb861836d5b05ef851cbbe3cd3825aee9e9728bc4f3bf4979e81caba8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ketoprak58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5214e42b0e342f505f119a8b4ff891661ac9d54b6b175c9ac1902534e879be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jengkol27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ddb9a3ccdcdb3581073f616fff9f5dc3abd19ecafacabc87518ca7f457fc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715e8ea774c6e894fe8725b0c9f47e5160c21eb6d583f104e9eaadac2bb80a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-oblok87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4401faae51961a3a12b2a503baa822d33f45ec291c144d4f2bcf7caa48b196a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-tempe26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0eb44f2ba6f321c93c772e83c4bf05acd33e9ab2f04da841c5071450b77c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...