MAL-2025-91156 Malicious code in tomi-kupang66-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee6793019cd9291c277c7d41ac3767734c353771388545474bb754047b0b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82872 Malicious code in ade-gado-gado35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283196457a9b7e61c150b6f336fbd13ddaada0e84681ce77430b07ceb827852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87409 Malicious code in kresna-jus42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75307f3c75245b802a9534e8391863bc31fac741cb2d37f7cb62235fff49c972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84066 Malicious code in circular_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5ea3e4e0ab43d9a8532fcd02147babebdfe0d20f404a746aa24016a7666a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92853 Malicious code in zaki-bakwan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d50e8f7d163ca43f114c482933786b92dae5987693d2d28921c9abf988dea7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83817 Malicious code in candra-lapis66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa9e7a9b6da363b94e9b9807f5165d12e67eecc60b6cdd57d212a640888908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91655 Malicious code in vague_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22577f71e7473bc573f51ff1f953e386f0ba7bb2ba214c8d821a0377c4c4d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89706 Malicious code in putri-martabak69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cfa11c2b04c468ee0889927b1466af7e9f7de567b7bc29237d9a9144e7e3aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87871 Malicious code in lina-telur61-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37206cef0388158beba9a2323892aa43b6e7cd507bcb5f38ecbaf9db0046b5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89138 Malicious code in ogi-toge6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed52c95f6759e598ee9a96c75c5557c4e454055d4d031848897269afa9c55d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84113 Malicious code in citra-menjes7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3533e4546512aca8023d852d1902d43532016a70a6bfed8589c0819849b43a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91367 Malicious code in udin-kue55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e967119c9616c4c3033164722b25d8650ebd7dad61c7283f3e89f2abd6bd1a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85228 Malicious code in erwin-rujaksoto59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019ac07a26a934af91da9bb3ad6714d2191eb27311ea8a4dd694a08685427ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasisayur63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76224ee2cc5e29dc40be78dfc6396f2f516bdf77189bd3561ed4baed692a84d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86299c40b454726005b5f2e276a59f12562c36c1cd4fc1030f7920472ce3e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48b7052bcd5e600555b66388e6c6a74c0ce3f05ba47a4310bb0982799ec7e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lepet35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a3a9ed0843d6efe5951f34a1ff884cf7b4e3ddd3b057bfa99f681076520a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff4aa4dacfa9342ac8590a631112fc8f4824fcac343c7cfb695dacbe59c394b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kupat63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdcf33ea5080b958476b2576011ed6ccce011e250a6dda105ce7755455bd1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tahutek68-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db92042418511fbebace408d4e3114a32aea09a9adf254e0b8e04e83f64f8678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...