MAL-2025-86405 Malicious code in hendra-lumpur52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f7495870e5d4bf17271c52e1a72c96d9aa80c003e9a33877c1d253ac8e825e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87745 Malicious code in laila-taiwan50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a6dbe98e82a421f39160230371e06eaf9bef14c25e48651cd8c8bd036e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89999 Malicious code in riana-lapis23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db6813db2e18dbc9f600599c2dbf0547e53483834fb911529648953ceff843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tumis90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f68f71e5ba978d6e3400356e55ee6e2715cb780ebbe0314490c8c2e33e274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-nasisayur17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508fa5ad6044084b3d9e6b2adbec3846b57e063c38d5526c008dcc28dbf9a4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miebogor98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3275d2cbde69cb20fad0c8672b73c4e970ce38a96c006eb384168b22321f2754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfceec15bac57bf8492d1a5e61ecd40c888d6a41671e99c70b16a4dc9f2c1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-enting48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0f0ba5385e78e82721d0a53023312e50795f6f532c1cd780472d32229b7710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-gado-gado11-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a59786f9dbb1f05153911924dc9eb43b05138624079a778c234132f3fec3d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasi54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8c17c6dfc8812b72cff912fcc3f4251e2a11c55092ae29caffc97631b893e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-enting7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023e1a79e28b3c43faa70b71f1c1e57181154628ccf659c87175e698ff7572ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e297107f80ab53ccd8717a0be95b047f0d7e7908dc48d1218803e9bf690ea9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2a2caf91fba630fb45c8472ad5557a726d603f41d57bece124e61e422dac23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-otak-otak35-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca65234f0dd4209ffb67f6ed48255e9a0115d3d4d2f5f4254afb9299e19f1689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes98-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c571883d3b777c38d5b0035737d5ec7ac8539bcdb203a55fdc1482bf40771d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87370 Malicious code in kiki-sate60-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963a25e84d574a68bf7c5b89b4c456440bcd4d4eec3eb7f2875dfe20524854b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-soto97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343275ed2c2ae28362cb890e67dbbbaf9a0389daa31bac30cb7895872aa24972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ed61758eaecb6ad32d84f40a5455f2d9e053f897ddeff2870820a3b46fa9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-dodol90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21684c9be736fd45d8ccc5f5da3b4395cf0f838c70eb2aaa5bad3838e7d81b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd25153d06b58faa48b89596aea4080874f1823d62c6f45c10033ecbfa213f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...