MAL-2025-123574 Malicious code in tiara-gaplek14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8456cdf21397204d896cf456da59eb8686326328db968077a5bbeb7598ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483024dcf974dd6ba8c7152940cb9b9e1fafbb7653fe06cd6438de63c6471449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ikan72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb80bda481480298c7d7c61bc7c1c0d585462a548d9b183c7bd321f35c4019f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63703c75df88ce24208578f961e5d14a4d6e7becaa487f0ac868b42f7e7d067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-naget88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d800781336efb6cfd5b54c243a749fe3d5704059fa8d3e72592d2b508b52eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kupang45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570239510503839337d5e180f2ac2ea837ca828fa4bc252c4edbb13ed7dc8c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f3a5b46ca9abc6034460d2ce5f996d80dfa4ab53bcaa25322872e0c0a6ede9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lodeh95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347233dbe397ef7e38eb3083830e9ea59cc99a573f724ffbb79585f6aaf7132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lapis74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84740cee97d3f2095b52aac6f58b3299dc4e353231ce5a82a62d85480777e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bakwan64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ec6af2c66c81bb6c0707ee34cb97d46779c6cc50e3214d631e961cd3eb61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-lupis50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75042d155d1a5df497644f8edb6f7ff85fa8230e9a6bab9dcd7dbba1bd044df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-oncom44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f02bfa5974e102442d28222a707e8a46f31690f6148b0eb9e27bb818dc541c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5a3287d5fb30a229e0b0ee70110fb328f3b3965dab9bf5065805bfaee3b5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sroto68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c631ee35a961dd24bf5737d0c88cbd0f260459e613c59b5bc5ed2201818b4ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-naget71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c04ba45dbfc9b63313c38b3dbca084a43341273c0c8753cdc8c9d14346b0392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kue75-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd743b85992d44bfa158d818d3af5e5e15c2bdbc9330a10d65f866e07cccd607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-dodol30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219d2837235e490445b13894eff701fae502f88c746bef70241ed7ec749c81d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-ketoprak76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6892031379f737761179c53081a6d0515fb8e6cde220e26681baab6cd48643c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcb2fd7af571aac727f4733e0eda0a8fad469b460d97c65864a25fee97750c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-keripik68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5688680d4e609dc24d74c91008fd55a387abae8d57d850289907ac396b73d7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...