MAL-2025-89309 Malicious code in olympic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635b77944a9e322fd7634553d019070210797c0ab308a50a709c3ccd07396f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88305 Malicious code in many_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8414e313eb50bd66e4b00a6519b5c4b0234a51d4264dcc38a5be6600f0b0c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91767 Malicious code in vicious_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0d68175bf547c3f7ad53bdf954fad6c7daf2a9629203533583a32bd6f19c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92488 Malicious code in yanti-keripik22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11179e7351a988c7eb28be60aa608e9ec776980e4e6e0992ecb3388fcc1b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90062 Malicious code in rifqi-dradag94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c91c8b9ebb8671a5712c9e775d03b4ca53e39306bfd6c44737623748c97a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83453 Malicious code in bambang-ongol-ongol94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a19851f28608a3a5e43d53f82eb5b992956696f905e3d0a4769ec3d49aeb41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91174 Malicious code in tomi-nasipecel51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5374b7de5fc1dac2001aeec3f9e5b1d2d738111a3b00ce8e89aabfb44ef0ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89477 Malicious code in political_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d5bebf8026ffc1d6f93376a27b5e6643544657ac5caf101fd27fb6ee33870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86681 Malicious code in indah-rojak82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73cfea12c20ccb5626495a7b679fbb1d6da00c011b27c615115a6122106fead2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-asinan29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01346710225176c341b1c41651602113e0bcc5637258065a04fbbaf061be1dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mangut44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2a8788bc66217a93615ab3002f365e9d2bcbc2c05132c484cf3fc59f7ce918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rendang36-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffdcc15f7d70472657e6b27a1d26c00ce9b111b8601429a7d9833c3585bd290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f5b1d32bd93448f2329b09a648aa43a2abc1071b456eeaeac7fbec97aec809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bakso3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6888df0ffcdf9e0f538cb385fe94d2baa2fcdc6ab7f0297d99f62823b42c93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kembang23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52205a93a3e93714636c3d259101a5e28c8c8f4c7368e09609b3fb781a44088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91969 Malicious code in visible_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13308352ebbc7740839de8f1d5107413b6eb6d169594b413c236bcb5aff227c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84864 Malicious code in eka-klanting86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5715457c75252f175cb2997101023b023acb91a1167158ac1eda767a241501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-sego76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17428bf02b5cbbacb198f575f4fb073ac204f8632adc6e85204df9ab5ea019a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-gado-gado16-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75141b3f6133955db99a2a667cb6c3602b59d2e6ffaee7d33bb4f3bdf93611fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86080 Malicious code in gita-ubi82-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c141b6e6cdcefdadfb0cb0d40a98d0aae8a3c6acb4fea8dc8f1b16cda53be74b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...