MAL-2025-90528 Malicious code in sinta-klentik70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b70f4ae7550c9947745c21e31ab8f2a0c5bd43a24dd42b02df97e0a80129bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83924 Malicious code in cici-getuk37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da7eea0259533353b4ea9a64615b23098ccfad1e9a3d83369defca4f19904ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91520 Malicious code in uneven_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de109694b2e94fe1aee391ada262544cbdae527de959776afc7443ea5a944b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86018 Malicious code in gita-otak-otak18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf61d1445180a35cd9b748a3196c9cae1b9e91bb23f63bed03b01ae056ddb85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83119 Malicious code in alive_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cab5715a0980bd2f36d17e144c2a8a5c1a4a0d2b3d5bd5c8f349efaa26c001b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84216 Malicious code in comparable_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29655e77b9bcc822990abd52667129c282b308d263663208727887122bf5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8794316531a4275f7a347453351d1633e0b2c309fc66e56074f17400f8d2c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e84aa12d83f4a6e18a86be0c9f4454b3accafea3f3eee84532d10f4c73a3d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27657bca7a64f829f6cf826b7608e7071e3de385fdba33f77f1b1ec3bce6e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bf716a08ca577ad97c5532a2a4d85da58997c502ed585c8f40648f7dec5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cda9c18dfe467bccf3a2acd87fd7cb47aeb227af62a73921dc18d4a1cf3d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c995798cc6f815abbd276a237e9f08622f43a3fffbac7b73129e86e8febf904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a02955230ceedb92c2567ba4e55e16ef922b85f72e38e21bc8f4e1bb36cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klentik84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8043622e50b2b4f20b10bb3d4fee01f2d252c70a25e4ab9f3428a3b12470334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac4e918aa0990da623f85b1de20ab0734d9c8a4f9be6052b0640122f05262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lontong44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b1c9f674033d0c836c65c1745b9b68fe6044ec42ff81a065fcce3c87b10fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ragi16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9baca396a0543407c9fb4e2b830a375afb46eb39c297e95e602f5e4b7d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...