Malicious code in budi-st-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d840e501061fa51884f7540468d7101c2d2d6d60f27b8f8be45251b0d4b262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156917 Malicious code in irassdhi-sds1s-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0c80e3822951e1c06faa0a9275b4d033aa78a0cf1dc25e1a2d26379a2e7ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-google-yildun-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd3f347dd7bb4ad386fae1733a6954156c5ca860200b6c24d20e396d0a3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135804 Malicious code in nina-ketoprak86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c1c11deb6d256c3418aa029a94c2a7e615a05e965b8cd45dad67856bb9807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-gorengan5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f158615e0315676768390d446af53d8bd971d65c308edd5b2b8e49c2d34fbb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aedba2d650972ed6abb9c5becf7eb202861d3e48e0988848583f9f3c5b1e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109597 Malicious code in theresa-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4fe55c52ca54e68acd27fcd8065521dc65962bb818dbb91c4b1a20eaefa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94916 Malicious code in ideological_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e9ad905550d69745fd297f81757585e63c6fc8e3b832e6498539957eba73d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92149 Malicious code in wawan-ragi25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceea8b27876bbb6010d98d236a2d78b979cc3031fefb676065b27eefd0cd9fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fe215f8e88086bea3f8706c96bfe0ff143b4d574ec57c8c07778dacff5496b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-miemee34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a2480b72008c84966b10a62b4e4040339e293a9a2defd05b7254989c2f7b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-mangga94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69225055b9b379cf927a6cfd93e6c3c8b1697c5dbe3e129560dae81553e8ac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...