MAL-2025-91722 Malicious code in vera-oblok70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4036b83c5667b0cb194f604a9261bf2c190a6e0efb816708778d71f5233a6032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82862 Malicious code in ade-asinan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a950cceaaade039cc0babee4a768ef113d152842db0a0717667a1416fa39f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90668 Malicious code in siska-tahu79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e30d1964769027ed65631806854376ad297e338cbaf3d604efd9281f19240d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90355 Malicious code in sari-kepok46-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c31436bd28812a9348a11db468c42a9fe6531e60eda1e2e6d6dca305864e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-miemee69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6a47732e27d25447ea7c723b573bbfa1191f6e5c366fc91edebdb6a0c79ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado90-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e84aa12d83f4a6e18a86be0c9f4454b3accafea3f3eee84532d10f4c73a3d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cda9c18dfe467bccf3a2acd87fd7cb47aeb227af62a73921dc18d4a1cf3d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal30-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382bf716a08ca577ad97c5532a2a4d85da58997c502ed585c8f40648f7dec5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80755 Malicious code in putri-getas88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cf647db86ee47344f33473c5c23ffd7a2cb5b5b0ba4b81be597b2723050579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c995798cc6f815abbd276a237e9f08622f43a3fffbac7b73129e86e8febf904e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be93e45dd8a33385564a39311f0509c62890bee41fe2415943b1d174a61c9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lontong44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b1c9f674033d0c836c65c1745b9b68fe6044ec42ff81a065fcce3c87b10fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-takokak82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9d3287f8822eb0928b6f94121ea3a25344186f4dc325c13eff58a52f5eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8794316531a4275f7a347453351d1633e0b2c309fc66e56074f17400f8d2c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27657bca7a64f829f6cf826b7608e7071e3de385fdba33f77f1b1ec3bce6e026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f55567123d6c13d4abba4f37e18d4e49df89b80119172b63bd02d95dbb842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526a02955230ceedb92c2567ba4e55e16ef922b85f72e38e21bc8f4e1bb36cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-nasiuduk14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ac4e918aa0990da623f85b1de20ab0734d9c8a4f9be6052b0640122f05262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ragi16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9baca396a0543407c9fb4e2b830a375afb46eb39c297e95e602f5e4b7d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-klentik84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8043622e50b2b4f20b10bb3d4fee01f2d252c70a25e4ab9f3428a3b12470334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...