MAL-2025-89712 Malicious code in putri-menjes69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfb8a723e1d90efe3fe3a1779ed57237f8d003ecbbf9e222b81332a3b5dac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tempe59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53ad3988175a57fd56f3aa3c9cfedc07f08f4407b465ddbd42eddbb362f7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-moci81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f302c3e5a6790fd5bcb62644a3734a25315669dd094f9bd16fd1d0bdebe9531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kepok31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ca70e432547ec4bd0032b15a80351d56cc16307f95656d17b642f126df904f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c56c3712df7314585953ab5859746c66e4e0bf2f37ca7e5cf0362e4b90e773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad157609de2bfb19192802b32e300b73344f0101e66a4f4a52859a62353f836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tapai29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084abc966edfdf9c4419348a4dfd74147ee17eef54ef714e66a64d9b26d74d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9192d749a9ae3eb99843ef28777ba2f69d45b2c662c2f33d4c1fb5c94e2abba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue51-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1830a3e89133bdce03ecdf150cb4ce7ec6e9bf66a35991ccff44d86436678c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4490704f13904aee7651c9e0f893f51c5ad5ca5ffd1b47ae5c184d534cdff667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-keraktelor16-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319e3485ece90dd12a8ca1b9058ba74fb8d181f659fab64e06309a9b3f2edc89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5b2d5add6e9d96199ae6068e52887e651126755fbf3c5317be90b0f3f10bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6637fe1f92d1c282430db164d20f00644ff9aa87834ac177334c8d6b9fbd59d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234d0035082469528e306bc9add9c65192e1dc8febb8974b4c1aabb35712af7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-nasicampur96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33f13a388bf5a3029a1574f8bf0e0493a1cd5c1cc26580d643889002fe1d834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-nasi100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277170e177fb01ad49963a34fd22a308f1401d55af51c3c6654f6d75231c041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-bakwan43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c997f0c738b80d775067d82d66c62707c819876387fe0faf75d4c59e666f050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89052 Malicious code in ogi-bubur96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21171646a3a4d2baa42adccb56b158f72ab4fcd366349cbf8396388520fdaa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lapis56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e477433d6057d60f31f146e67122d836f09f210ae9696beaf64ebde6f28a149b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sasag88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f610dc676a5b05f7dbb7cbc734b05139b2662528dccaf2cfa696cea0b25f477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...