MAL-2025-86087 Malicious code in glorious_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e65884f2b7dece228c9389aeebb1e11d20937458e9935894d5ed5518a38dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86960 Malicious code in jaja-klanting73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca8391d9f6a1c317c828fc20999ebdb292bf1d69485c33331aa3fded825c236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92694 Malicious code in yuni-kepok83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3260516d1d0281be18db32cbea21652ad1ad598b6c8aed410035205b53375347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gudeg24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d76a07fecb91e1e2feeca1e96b291e5498bb8616b24ed964bb84d1890efe787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-getuk22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e00f1d90db0c1ec39816c72d61a5b1468e3b8a2615fe7ea510716effa55064d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kue9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a710298c0881cd3792765101bd2b0d2ddb12538438f716197f5115c0ff803634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a075d8de27b00495f9704274f8a747346b6b2849670fb2266c04a635a15eba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3930c3529eddbc5b165efa0eb124234b86d25a2fbcd673351ef97d76ead4f9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ronde36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d6ea9ad90d549d8200c51d5317e599d4500b94da4ed3584dfe648eab8bd718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lupis50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae463b93d2d2af35e7268d09a84e5b95a31a53649c156180b3259d60647f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rojak33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972bc6f41d26aebbd68fa20dd60a09ebad44a755021dbb70072898073a1c4b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-taiwan36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f745c135379c2dfeb287d06f073d1d5c71e49810f4c9168ef31da6281e3fbeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-empal39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c0bdadb39dfba4bff25df9097b3a47271c51a062257ad24d752a3e998da9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294a02a3b2bfb0e779e9da507bc95e159221bb48c0380434a3e30990d1cd094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b8a894150844c1235a616c052b24d7b0e6718d03bc40d1bbb056ad3d17ae5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rujaksoto8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8191076eff0f1d85f2c5a8ec6cff5fa2e46ce8649586c2995b26aab1d8eee0d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tongseng39-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce6a72a27b646f9a4876323b02a67e979500c8fba02095007e88a8d46b9699af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-gorengan34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbdce2fa6aeb050d4ee4ca3aa5a9e66104bdfcd0886ffd2b7e3bc906ab5c3d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tomat3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da593a0005248cddb5b2d7509c5a43ddea68d7e2c0fa4c40465913291bfc451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-nasi4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f71281ea6827dd1ae49bc9bd5f4ef4a56acffa386054202e9911f29de9baf55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...