MAL-2025-91487 Malicious code in umi-sambalado9-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1d53e8dfcaf4e5982e49b9e7bf87c0142e75eb90383144cf5ef5fc168265ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasi58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24b66eb1cb1f8c7c59b9bd65c41a07989f18f99be1c44299e67d0afd013e697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-menjes60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bdb702123a8ef6161bc691fa1af1f427e2f84523eabd8b0db785c66c11423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-moci69-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9fe8bda0e3fce6daa6e45c85be7017303fcff9df5fcf8d89dc7b799a176f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-jengkol89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287937bf98b718f4698fc50278e30d06f0297edd8f0caf155abb5c9884f184b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-moci98-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97c2f3c371fdf4e2ac7b7a9015bfc305294d5286cdc05508a85f02146ee3807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kripik6-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af08c90963891d8414ccfb71eb79e61a3b9770eff141385a035a843212f32c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-mie87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8b7679273ac25ad28dd84b4dd0943ffe27ca7ae24f6aadb3e1dceff86d7329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sambel85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5d0fbec59af2bd2e9e4806a59cb5e6d1fa6ce1c92250502789d971018ef0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-tahutek61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afa0fb666bcf514f6eefeaf2452dadd124f78be029704cb37a9c93d2b4c307a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a04ea3887962ea7bfb55d6a14038816529a75e315889c11ac4f9f826876509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-peyek76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c7c2fd18ef96aa420f9b75eea957263bc0467828cc86352f3db4039fd70a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc8693f17483c952647dbf8958b2f0b7d811272e09900c16375037850283cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-lengko91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792af1738da553825c4488bab12ca28861dcf28990b506d08f1940cd3fd8ee55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tahu70-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6ad114493ab50f03f02349eef5d408975cbd3563f0801ea9f32c423a9e7480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-rangi81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e619b3fc23ff2c6ae1addbf251c96e7d3b28e65758c78d5800eba65679060041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-tahutek34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800ca2a25d43397da9f2d957bd5220ca8de7d32e9cb354b63a8258635784dce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tahu59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cf676724306681aa703407964b0f4d033aa21e6ba140bd357cd3ecea39ecb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca24a1a7fd41712c400ca5e6779f9ae9d9cec0326ca2457c430906dba1482d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-sate38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810e69f0a8b9df4a7eb051cdab8494a72c44a51baaea0753cbd33c0c394ac7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...