MAL-2025-89946 Malicious code in respectable_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b2fb3170085860cf2860fe2b8067fbc466b9f0a8672397689018721531b9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89214 Malicious code in okta-sate95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9995cb9a05d49cf60bdf3fda022d29edde82a21622d6f26c50398f8069d3b31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84586 Malicious code in dian-kentang36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82172e2176c0bfe03946b84a50b8c4cc3686b9b1cdf73106b34b4b9c78294e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83117 Malicious code in alive_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64964430d841d69016647eebfab818ab3aa8ca061604597fba524b43e9fce954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28090df3df842adc782ea516a450a16f48ae2e4ba25ae487646971e608a0b230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2951ec2eef86261aa04df5c223a500dcf34174e8b9e95cd5dd1ad435f0965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-gandul78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604f9278c8bf8818b28a80e67aebbef1bfcc7dc7f180743223beadca75a7b52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tongseng22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3259fe6cf5e31f77c2b7019ea7decd7bf24859e1997994c95e9fa2e7807cbd9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gepuk93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a491c95a8640cc5778ea6589c11e18396d5dc74a07ca8d7d07ab27c8420bc278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kue28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fbba307244c25efbebc8b108bfb9f3f1c2f02383e34631f49d24d462cbc8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-rujaksoto59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c962c24b349006ae80f6f7b6acb7a3ea4e8ad0902bee46be7b6fa39f5ef87abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kue28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a2dfae48fefb52f7b60dba483b6efa3ece1edc23c71d37f53e8da38f39765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3cb297b4c7e87555ec93439eb0dfd8230830dd3038691a5a72c42b40fbb29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-rangi36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996c72729e8de4ead9ca7b9bdeb80a02e6fc71eff14fbb7abf59b6bbd22f7f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sate60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cb76800e26cae509e42d51e78a1e7eabd61dc6e808b9e9be252b4bdfeb7dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-klentik18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b662db302a1e28049ff9f3a921b68bdb7eef43dbd1425170a07b62c1c8f6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-botok1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7e6aceae3a7cbfc20b95a82fdbb0675ef584935a9de7eeacff7a30ac5b3a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-otak-otak7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2cab166cde934a7dda7d1ec9f367b4ef82c3925db6d5e3141432619b69f082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-brongkos33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d32cfa8c5e68e09b757fcbafb3c49a4b0efea1565daef8652d9cf6cb3fd8ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-telur56-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853efce2aa33ac87e1b643f16c31a1f10f8d4964e862261f63d1f099d5313dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...