MAL-2025-85354 Malicious code in fadhil-mendoan28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a05a3f2dab3d437ac4e32529550f928f07dffdbafb3c2dd2d8a0dbb80f94640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89127 Malicious code in ogi-soto8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d611cf3484d076fa9e5ff40c4e408e23ffeb5eaff5812f51518ee27a8d02a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92004 Malicious code in wati-empal54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a330f71e8d2d5c7b4a12b4cbc65fd4ea19ce2e9fcb63ba260d72272414f05f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f3741f8bb9720f399e810516890a57aed76771cf4d4769e363a7bdc8bbeb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-bubursumsum36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744c1ebf13a1821cb2e3a105e7bc332657b38cdf09970f23dde60b3eb7ee33e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb6b0db9b2b95cb9ef2a060fe02df4474f136ce0a5190303db0c60ef4a4c25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tongseng93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a90ce6e0ac042c52194cf6a5ec724ffcb08afa6886545e6b9bf7e2413b25919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kripik26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2148c2c1873959820c25ce23d3c6753512caf8193556a0a52dade7a102abcfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed51c9374fc80d071234d4c39d8bd546afefa3f2cf5cbc1830680536a0f43325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-bubursumsum7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae086e21da1ee49815f55dfeb0778e75c3405c7b3fdd5dd8569ca67ecd29163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-lapis84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a6b45b53c812e5ec3f48fdb8656f3bcd8c0b086eae431d96ed6add2a2ae969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82464 Malicious code in xaver-sate90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821e4188f6b587a76235f70fafb87a5f1f8ea1192314cd9e738717cfba83c695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77105 Malicious code in budi-gembus94-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d1b0d935974152af3bdb1323be476e35ea8b9204d58b984368bc207e49d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77153 Malicious code in candra-kue46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3210c6d46d61be70ec90cdc43cc3f2b068102cb51ce32953b2b5f0a3b711159b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-taiwan87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb5c7e78885ddd71ecac9129f3300101465cfb9cfd5fca1b897c1ef54bf4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-dradag64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a5ef957513af41adcc08b3a7e13cdb53bfcc1697a6ac63e6a8319dfd6ec84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76387 Malicious code in yanti-lepet98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb1aa23bd14caf71acbc0dff988c6671f845bcae7eaf5f72e3dab8961d9163d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73934 Malicious code in kresna-tapai91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9ac32dd12de8f3d3d0852b459879badaab86352604a66d5c1d22157fa7e8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73013 Malicious code in fitri-tapai69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b888cfbfd6d9683fb1664ba0966e574f6145ff4899d418845e7f1a4b49d6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586de2e35af549d359f672e63416a8de610675d5b0654bf77b5da1d36683120b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...