MAL-2025-134181 Malicious code in holy_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29cead5e4fca575c608197b380b55f0e4d13be7375af183b091a0a5a5734ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137424 Malicious code in tuti-gado-gado20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3e44eb4c6eaa048ba060916f2848ba3a951a5fed2bacbe4d138a353237c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132160 Malicious code in bambang-dodol41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e1a6423c0421bd8e7c9a08d623fdfca10b48568fd9f4dba81008472bbe24ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-oblok71-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e235b6cd962d60bbe6a5b6493c33d387983271fd12c6e1481dc8de0cf9e3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137422 Malicious code in tuti-empal83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad25b8e9c30edb4838f6bd59f6afca9addb79a02e26cb6b8d07e03047fd90e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135503 Malicious code in maya-kentang38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396144e20ae6b9234a26497c22d47172958627ff2006856e152a0d1dcdf8dded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lodeh77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fab596e1daa9acb41d8cfa46b6fe8a03b607e13a56ae937634c8b6b77fb6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a06e01d159fe96f8218eb8826369d87bd448dc9f4b2e424716a78a706aaa003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combined_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79265d5dcfbc672bb33bb0d094ee78666047fcde73345a2d59af0a17173f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-botok78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f16743991a4dbef89548cc13421d7f54988df217798117749a5697f5dc25454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rujak13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2d3b9cd45bc5d074cb0233ede6886c78ae6debc592cc7b8112341c55406e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-keraktelor9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5201b494e32859bd65684b2c6256403140e66fe023052d512c67d9f16cd642db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbfab9c80488aed79e67b02996b143b4f7bc0d1e472a7dd4266cc80e2926fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mie30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfc98c5e8e814b3300abb3527d33ee5e064ea30e3108516bcea573c73c896bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-semur61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d238dcc0a50052caae9274063ca94f725d87b0504f180a73336913af2e2f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tahu72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f1ec6e8088b58c32a3748f2f00f78bfbe2ae91d4703bd49181fe901891c308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cde64276b1b0d479ac0724f6e733858915e3b6bc6a2d0eeae71c4f2d90a748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07d424b8317bbdc451695563207362cb950a17937a9ed39fe425a45b1de003e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kentang36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00e6be8dd18c4dfc753850b27e4cbb27fa83c190cd4f991677311fa7ccabec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-tempe62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56a6df9cc3bff158a45523a5bbffb8e0cd4e5c98c922bb31771b981b0a75f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...