MAL-2025-135973 Malicious code in ocha-tumis92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ac97dd2766e6cc3add66573b43162b32f2982ea293f7f9b9fb14c32183b0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134291 Malicious code in indah-kacang86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4992b3537f67690d7db5d1cf6ff62190773576c35e67fdd322a34f73ffa7af08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133272 Malicious code in expected_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c42ad0b88e10369d5299bdceff4acde6fc9bac7ebe3d633713f3b2e2d277004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ragi94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe54ecb914110191c857d85b9bac119333d7bbe28f5049beba47214669429532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137596 Malicious code in unhappy_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a180ebf39eb259b98e8d9831feb50fff44544eda2dae118311d97d6a954339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136031 Malicious code in okta-bakso89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3add6daa12ab6f75a2376665c69b25405fea21cfa4bac3ca4d9845981bbafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134952 Malicious code in kurnia-lutis86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615e16983cd1b075996e081f7e41ff5d992a874b0fece38e8805a70db5ebac40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09e1530430b89b336773c1831db078dec3535a373509eb7b47bc886bb10e75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-lontong84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36287b5a5e8a183187fc8cebfd898c890c0526563328ea78d5ccd09a2ebdb5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tahutek99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba1d8fb6a40a0aaaf6ab6c73eacae7b89aad800283baebeb2968e19a20e23c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lodeh21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1e4d6400a18e5e22c7b7985b28713f82fecec4dfce35d1411da84610bf29d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523fc4b5bad62f82415d77f8a8bc69ae5c8492a3697c2dc69200ae4391a398b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fe135fdab601fa8ee640ba976ab685a36e87a9a621970efcb29a420e9cc1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rangginang99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc0f2806965ca84edc7a674fe60ef899962be9c2d591cb31daa4543e520a2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ongol-ongol85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb20140d40d0ded334f262a253d71461bd374a8175abc7a2ffd2e2042f8afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kupang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dc353274f4278550a71704d962f22d94fca6bb96b5ca6d91c2b42da931344c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-toge50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1354014f12196f7d7e75d780a9fee2b9129f038a763b8ae8a164a2252456004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasiuduk17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ad94430adf2370d212ffff80f8c4ad9b1ba78704b15a461eb5d6a374626bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-sasag74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a0f7ddba0b8a560416f1b137b237095d69ca432a215bdc599c2598ebe65bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-dradag11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754951d1512cab93376290956d2294e1f25e1f8f743ca8a71c23a1d9d37a704f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...