MAL-2025-123492 Malicious code in tall_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c040a078130f4e083acb7a28e1c8777f16202830b2dc634d31d50010a9820f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118562 Malicious code in ade-bubur73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4f6bdab0aa4a30f4e329afd89cfcad55335bdc2d95bc6076e69788e2dae76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121555 Malicious code in lisa-nasiuduk61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 718a2b65a45b4f7a6366f52f1f25cae0d9fe66a4aad0c094924b5ab2de89294b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119503 Malicious code in dian-keraktelor100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924e4092a31c87e6d91a31b392b3c844ff7243f7f05e27355364ae0a468aecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123007 Malicious code in rina-lapis72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fccafc70c95098d117473f7c19a056f6c31e25a17568b5b1361607a1846f7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in reduced_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3ba1e0142cd953725df2be653469ad98f0a0a5a6bbea406f3d7640b471ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-bakwan37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa6971ec16546eb4a3134f6a4d59cc75baf78bb1cc2f79cd1610d0d5bb5763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klipo10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1546aa05a86e9d24a1aaa0eb1e9764ae360448fc1f6bd37ed791dc4794c0989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0807829606e40f3a27e90c16022602e6e05e2e382fcc92ff3062e00f7a8453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubursumsum93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207cffbf78af808113c4960c426e582c3591b572587c49311932ffa46d6e40fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-menjes96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae83a1ae8d62e2b245fe72335c3b4c44f5fe1a56063e263fd375d5c6f0d3b707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0327776f7fc0fa9848e7bd8e10c57b699413ea38db598c80f15da71a3e60f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ff851e9ef68c48e03f2979d178e4f7a25f09d8a3f74dcfab1ed662a4a05d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-tahutek20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd32cd0866b4fe9b8b8d54e2cde50d923e0dca4594930f4159ad8ea2540f2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kembang36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe92c23a8faad6e033b1f979600d6f7cc4314d64aa473b5efd41b6a64f67cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ubi41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3685ea4651a23d8976becc47cff182befa3740fcf3a01038b30979edfbad7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sate10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cff78ec1b6e3b770792c7353e2349c828b4642a723153b7c5634069c1655c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e272748f675a55fa42e8fc8abdff9a1a9075d45aa9262baf6849e6ed622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-oblok90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34ec1e3d617c89e83387fdfc9e086ad9bfa059b5bc2fda3c68afc85410561ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...