MAL-2025-78842 Malicious code in icy_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b146fcffdff34b2bc9c53592696dea2da26de4c15533813ed02eb5346c29c2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fa025def43dc522b0ca3501ff0f6ddd0c2479bb4b4d6b0e8a8692ff5486acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-nasiuduk64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246dfb5bf864483959007d6d5a0da190aae9d199861c581cafa1bba486e90660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-teh6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a0bc2914dde9d0ecb31056b101036ee6b6a668a672c9896fcbf20e9d8ea750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-empal94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4434c90683ebd8773a5832ca78f7d11610167b13678c7b07d8cc9328114b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5304f44d64837d2ba3d82e5be447527265be5fd38d46772a0e22c082511fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-empal55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d9761cbef9d11f8ed7456f2e66b06aed7c6fd0ce94dd227d160dc1f102ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-mieayam44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a9ba3aca41f9833f357e2d7b70c78d268e01ef747cfd2b1129d5c6ada0130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lapis52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80ba820d2d86a7158646874dda110e8a8860609a86c46ddd2172b6ba955d0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-rangi4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e87d88c2995f01ea41c5524a79b2b68aa599033582c3379cc8d8ec60b19eed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-tahutek92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7de1bf41caec0e76ae29b42576c24d1e481a38e9c8b7bfc9730f693aae76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lodeh86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ef08bc26c2048e8e76679c0fe4b3e7902598b49772d0195cd1adf2fb91740c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bakso92-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980fd7f9541488847f7bcd8cb3a36a2af392667835a3a597bce16f253aa4ba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419f78763f75cf574575fb78f4453f5e76db5c4f34d7c4603f1acd05650c0da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-jengkol95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609ef232972f9926cbd783b4df9bdb08e87e0e081b856bba0009fb9d892560b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kemplang58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cfaf35aeb6c9d0f4d9ad228b248cc47c1b647655ad1e8121303f9f180f2d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-klipo87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edaf8bc65ffadc56484eca8de1af8c297ddaf6325bfb3953644dd4d84aeb6887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7200693f5b41166666e6746e302d0531be9fcfb404c78584eee893b623fdf2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-brongkos26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a4d34f8607634277ba5c1f7af3e23673ddbd45fd319f2ed43efee132fcfde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90207a7b96db0b10d0ddae2fb8de716136e412629a4108931aede3d8d3385b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...