MAL-2025-110883 Malicious code in wibowo-sambalado6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e496526dfa22ad38b620f5e4be203017348f8314df1052b1272ffda7d2b02d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e84098f92cef08a5981dbfd9980783e8d6e1785e31eea8a05306829a0b1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-brongkos40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b7ee98a361f9ebaf20e7692dfae732cf075da6f757c8b84cc1345995ab17a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-esdoger10-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6e2ec9fd19b6aa12dfae1e53691c7bd7cae316a893b150d6817933c77114c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lumpur52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2975c87a36fb408e87ca4d4f222125b15e094f3ca6a78dd79cacb3abb731cb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jamblang98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a69d51422f4513dd4038092b2382d70d91efa96d1bc84cc3650735c5fae5199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-oblok86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469be58c75e19bd51e7d39330d7e39734867914dac35ed3905c9806abf4a26d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f761e8b0955f74fd944ec6f5abc8cfeefff93c3811389360c4545cb17302bd55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tomat18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda5d9d99a1848aec53ac510ecda8e2540247174264b20dcbe8811fe12e32561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-getas65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb65d748e05fd149d8f5958185424bf24d0fe1e205c2d0bb0a0fae3ee6d50e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gudeg39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b9a7e8e334329a4f98a6646f6ca1d9f83e5b98e1f025925739ef5edb2761157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46040f392fb5d8919b60cfe52d6ae07f09ae7dc8639e80de8c134fed85565097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-ragi91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c213760e7397b9508d012d2c238305df0444ecc7909e38b9b921609cce789948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serabi14-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dc19b6b6922cdcb87a7b1bd9454de4a8310fdecf437f475efab8530fe603c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16614c1fb332561ea55c891a73810463b9dffee856df04f525e7c0d652a66960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3920a9f0c8d791cb0809fb2f9f6ccda70bf6c9afeb894523053c67d52ec7fb2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-keripik13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241759349acd00e0ce840f7c53a85ddb4b82dccb939ee27bcd9c434abb633702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-getuk35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e47956b49a0ef2ba59a1cf78c1c84c229fdb9dfb5f5dc2e199449b4eea2f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-toge41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5de2000392983b3129d874f4a5061664918865630d4cb2cf312a5cee5e9152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tiwul47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c19d7b1f650c78b2a32a0d509291521feed4816bc96793bb1e6b258156d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...