MAL-2025-104905 Malicious code in kurnia-gepuk17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ac24e2d6881e4387a4c58bb95eeadaf726dce92818411538f66b444bb0a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103544 Malicious code in hanafi-mie32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc5cccd72328063164b38a7770e2c5ac16a467e5dd6c6ca3403e3a9b0e0ac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99438 Malicious code in andi-kue87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f7a7a2015d5e720a64f2cba05497bb8ff926712a71629c606bc183a043609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100323 Malicious code in changing_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ec519cd1c387e8585510ce326b9292852415a2aae67386ef3af6ff773b0012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46040f392fb5d8919b60cfe52d6ae07f09ae7dc8639e80de8c134fed85565097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ubi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0be0d559205f65d5e9002f51b459b562157e619d9ec6e139c8ccb64056e1883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-ruwet10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771b17d930d012a347dc1b48e4f8803251c74d39c55cd820c9f06f31a44b87cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766064935aed472417aaafffeb952337246e8e7deffcee0f3a6bdfa2f4987c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kembang4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f43bfefa42db631bf8a8a41bfca02e0df594e8f9b6c51e48b70ed1f5fc6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-empal60-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f82adf2022a6edcca8f80bec056f309abe8b4c022ed55294f7d6045e18c592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sroto98-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffe66812fa458f53d2f4f206abb6b6194749c8b2a164a56f65b934e07404534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105415 Malicious code in lutfi-mendoan54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9a7878af0ada7b6e55f022de410ab00605bbb7cd46eec10be00a92899f5d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102529 Malicious code in fajar-rujaksoto36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff296660966c6f7d9a9b95e2b07190334b5c9f1789c5270bde3524b0c6818489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-sate92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a02d92bc0dfc457ae4ca963d8d8b198f4dbb3532ff449f27406cb66f79c25d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jamblang8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0e9da2a5abe8e70b6f9c1e1d0a912948d99fa9c8a39c941fe04ab1e0c787d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-rendang100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a4bc063e36026fbdfddb1aa7f260eca7d0b96003e57d56d468917a22202b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sego67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485a236aaba8128c2da92603b75e527379b0fb9ce1c91426bf3586365c86f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108757 Malicious code in siska-getas10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48ff3659f2906f1edb01cf36fa11bfb1bed958d814e7dc74a4eb57707d251bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104457 Malicious code in iwan-lepet90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2e600c722751ca22620558a5a6c42fa56d8e12e1660b9dee4c67a109d89b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103018 Malicious code in galih-brongkos25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4d33764883763c4022cf7a3b86f4d9d4493e15f56164c0d370b1692ed04c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...