MAL-2025-77020 Malicious code in bayu-serimuka5-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4450e42a634ab33fcd6ee3d39152a789dd1650deffdedb4a9b0b2fa9fc606adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-mangga82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b6295a6594f558e5c59531a93d415a78c9017044e03bbd66fb3ff1fa546b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73150 Malicious code in gita-kupang76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7554aaab8788190aec194bba9b5bca60235eec62bcb8c330351b0e0bb4be43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kue49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aec5de55562ec57a80ea5898b68ebc75be081e0da61f70482d788cf0437ea91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lupis7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed316c12791fe7a5c8223984d24970048340f1f99b8ae23aa99ed7621529c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75264 Malicious code in rina-mangut24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608897f28073f07219d0858c70760b2f010a10d26988876c92d1b3a42ccfe202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasisayur5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4283beac50215a982dac595ddcfb0d8bf513f1fd8e159a224f8adf992484edcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-blue-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93b88bcc31105dc32dbd8f4be13af386c6af50d7872ae0d50f01334f3378964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-purple-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07578be3902a2835dc6a28bdc4b4649fd1ceec24d864bd78bf72af95e7c852b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70430 Malicious code in rubber-ivory-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b502cce52e2a9b8559899bfe3e926ec88418564104d884ebc45fc7f53a07da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67406 Malicious code in confident-brown-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb39bdd19bf1f5eca3c6816d46146a00a4c7b8b657db61bdeb65c7155e6c77d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual-yellow-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70188f92e4ffbcce050e757458a44ca05ef7a9094903682dd23af0e85d7a0b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate-amaranth-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7029ab1e9a8977c5c3ba17f0d4039f3dfe179686d9c423acb2cca25ec9b8766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble-aqua-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2866c8abc0975ae4b1b582d1986f93595133d6f60c4edf4a62938b5892194b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gulai33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd3ab0ec7604937e9e1cb35aeca8870daa99d6ffdae80f62423b29bc1b76f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d36f2cd69318df8b907d9adb753179496d221b32c728fc70fb58b10abd86426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c955e9d3a66f2eb73ae7e62235a5aba1f0672ae2cc5a81975444c00d0a58e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66093 Malicious code in wawan-bika78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7624a71d155aba3e528ed06b4317db346dfcb49b745635cf86e6e724073e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mendut85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6297949b4c40f33cb5dedd5f7565402b942b4430200184c06cb4aa21f6318ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-saguer98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3971993a5e8f074e653afbf7783e7dc9b02e98f5828b0a98c070661d80a5de47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...