MAL-2025-106569 Malicious code in ogi-ikan68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b462f1dca276daa655d11f5cf7c1eea86053ccc68b031c9611183e2843e565c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lepet48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84b3225b9e1eec3030b6e54b6cd21dd81d393fd754e482291c092b886ab5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97599 Malicious code in bambang-jamblang56-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2056ea0d004ebcdc97c0e49d771662590312d594aea46107f5e0ba4e956865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kolak70-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf63547208fafc7ed252e7a12763bc8d1ad51ced4d5b29f9278c641479cad26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b0aaa24d6006815df9241bc66eb16f3d74a9745cbc13f5db39cc5ddbd07477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4391af2e294e8295403300c5d78912ee5b2f97460d24953a106f61c2f562afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rawon100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f47ba0f565a21a79cee9d0d0d62d198251b8edab7ceed269e42040a4a13ad3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89380 Malicious code in patria-dodol82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa84d6f753707181c9e9b43751ee88b2736fd9161aac369eec30e3e20f66af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-lepet63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a43f1ab67ba983cfbe7a01288e12b88b6c88636e796cbe25b62c082080022be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-toge73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9f2f8ca3192502a4568fbe6c977150679af99dcb2ac340fb31408ca5ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90654 Malicious code in siska-pisang70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91511ba4cfa5e1c1c4c900c1ea4cb1711627f8a0325ce215df5aab09f60c5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-papeda4-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d92cdfd5ac8449969cf39583c07d93da2b82d258e8e5d2d791b2d79297c2276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83473 Malicious code in bambang-taiwan88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5ca100d492ea03718edf312b320b9d930f8abcc58af3b80ef9cab516d66776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88398 Malicious code in maya-tahu30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa18c22668dcae8996f93db945bcdca742411d91baac12624b90af76c608c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78184 Malicious code in fauzi-saguer53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7777ead17793ac51c9af1c6b601dc4021a39c77bc7e27ed8714c5bd058bd5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76290 Malicious code in xaver-esdoger61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015670bdccc769d2f9fb9ac05eefe4f8e61c43df8d29cb9d4740e74a7957c847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71875 Malicious code in agus-kemplang31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63a074a4715e364dc0d29db905e2640eddaa38ae85d6f15c304029a001b6bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gado-gado43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f8a36dc6c06890f8178075f745d8bc09d1e81310d96a6972566c2b426d9249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-indigo-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012547fc3e6b24f15f23ab2fc928e249af92ca55473808ad5498e29ad7e3a7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-peach-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46de2d7f398790fee054a14fce2d1d9f32aa3c59c516ca78c4fc3d29ec78ab28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...