MAL-2025-94415 Malicious code in faint_salmon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd317fbcd7a42ca1c3f356aa0947a7afabaa55683c4cb00884f59a5239d10afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kentang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7aca7afe6459d9b54d17a85bf40012627919f2be010ae85a450771b7094f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-soto34-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369277b24d76a849bdb79380467f5aebb6f72f1bcf8fa55fdf79297a92e76ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-klentik66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f262ca1b64fed9b3b2cdf45eebc3cdf1242a8e80d452430f17a97cd76f0f6575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5523cda9c44c702cdfee20a6b0bbbf38b2adde3bdf0702b6de491de85072a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75d4da26ab6b839aced898b2f2b9de3b3a0fc163cc5712a4e0cf6a9c28edc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a41716b6e6c168eb24b13831a015a42abced5dc8f54153739feaf2736069132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-serabi20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3527c13f545808799169be00434eeb5bb830a15a6f6dc11b91e002b434e7e115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ronde78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833def41b4599c1361919f4ee82e50cca21c833069f654be2851ec3d5f8593cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-ragi89-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb652020d55baee3fa4001a4241d04904284e1dd1a55632a8ae5a05cf171e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-martabak71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d46bba37af921d9c612f12c553ca5ab1faa704e71bbdcca4a1d2facd20d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be2ca67506c7cf196fcf491fd9430a2c968a407130baba9e4cd9701042068c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb2506e29f7f302af27b0a1ed1e82b03f06814e9b2a45c9acbfe7af4fd73dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-rujaksoto63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c170455967e6829270ddea0162162e0b133ca49d6f827acf9607bd13d6c3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lutis44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa1b7bcce61ad4dfa78b9cec0d0f32c1196898cf56dba17bc2c4cf7dd8bdcfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635b77944a9e322fd7634553d019070210797c0ab308a50a709c3ccd07396f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b74a34c4d999975b3dc11f94d7319763aa196a85609c6a7b3736d8a837d9ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambel47-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6925f604bbe19379bc7f0a56e701a33ca20a948c82c625d6290a01f37b04c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sambalado13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3e5cc4ac7c29658415f62b64d50d40cf97bfc56f698ba625e06aeb57fc8d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tempe28-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd014b6df60f6a4cb21ffbac43f2b423498b43cc9d7352f51f3e1d0f8ebdcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...