MAL-2025-83119 Malicious code in alive_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cab5715a0980bd2f36d17e144c2a8a5c1a4a0d2b3d5bd5c8f349efaa26c001b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-wajit53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bac7d8606a4f4eda677869944853c63a217b9b64d502d4f70c51995f52f1698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27657bca7a64f829f6cf826b7608e7071e3de385fdba33f77f1b1ec3bce6e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a02955230ceedb92c2567ba4e55e16ef922b85f72e38e21bc8f4e1bb36cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bf716a08ca577ad97c5532a2a4d85da58997c502ed585c8f40648f7dec5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-miemee69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6a47732e27d25447ea7c723b573bbfa1191f6e5c366fc91edebdb6a0c79ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lontong44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b1c9f674033d0c836c65c1745b9b68fe6044ec42ff81a065fcce3c87b10fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8794316531a4275f7a347453351d1633e0b2c309fc66e56074f17400f8d2c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e84aa12d83f4a6e18a86be0c9f4454b3accafea3f3eee84532d10f4c73a3d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac4e918aa0990da623f85b1de20ab0734d9c8a4f9be6052b0640122f05262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klentik84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8043622e50b2b4f20b10bb3d4fee01f2d252c70a25e4ab9f3428a3b12470334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-otak-otak64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bf30cd7cdf73cea7cda9b770a5d4b08ba741757ef3e12d54c674f688b75b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ragi16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9baca396a0543407c9fb4e2b830a375afb46eb39c297e95e602f5e4b7d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cda9c18dfe467bccf3a2acd87fd7cb47aeb227af62a73921dc18d4a1cf3d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c995798cc6f815abbd276a237e9f08622f43a3fffbac7b73129e86e8febf904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77976 Malicious code in erwin-mangga22-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6cf11ca1fcfab9b5424d76e7987f292d54eb3415420ac42244b1ddcad4b5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78791 Malicious code in hendra-rendang1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde66990c3a3d43e143c2ebe674412e4bc425805a9c36cd6376046e70aabff52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...