MAL-2025-91566 Malicious code in utomo-getas69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0838655ba67e665e7a246b9cea2b8fb3b15706cf447fa5922fed42f9672579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82042 Malicious code in vera-klentik16-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cec3b402099fbbd07029f21eaf9034dd35f503ea93888cde3198bec4c9aa16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-kue35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617cb11f7c08eb52a5d10f9435a02468991034104a5930d53d45e22b27bf3699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kue9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a710298c0881cd3792765101bd2b0d2ddb12538438f716197f5115c0ff803634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93337923ddcba647ed0965762c5b66f0c5ab1e4ba3b71f9e70eee986b04eb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasicampur91-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2e66064d5c2823efc869d889063dee1e55540d91c0e347cc749aa10629d098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82208 Malicious code in wati-gudeg51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87285a4ce9532690516162077ba34d51f8c363318d2b2588faa3d639195dabdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81078 Malicious code in rifqi-wajit35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b224496ee7d3f436a59fc68968df94ca7a95b2f438adc1f9bea3251e23d1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77139 Malicious code in candra-bika44-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acc6ddaee36360eff6a9d92b05d14c6d02a8c1f716915617b640a60ef658946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-lontong75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be599ac9ca6e492212a7709624317c02a909b286c4e5e8836989d1021d1fc830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-nasi56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80ad3e710915f0cc2c98c4015f20cee58ffaa44d209f83da40c95b038188b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kacang74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f6458ce71f843f878e6e239a011dd001f49e4f1f50abfa81a15a8f8e430cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76607 Malicious code in zul-asinan98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fe4f6d19d3c0635885979dbe5e96cb5b12a8acbd4f1873e1235bce274fc596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-enting44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab086a7a44dfdb03685328034d57f6434335b3f46e5a452da061bb8e6383f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-papeda78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d010cd9afb6fe0abcca2d1e0010f9fc7de502b0070f343e48acb5b14dfba3f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66323 Malicious code in yanti-sasag87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b15c5c40f3f1c4e2790c4fbddf5184f734f612ecf2da3efbec772b47f7d45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61478 Malicious code in tired_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f7c51d91c9293bd8baf1c65502c88da8a7b2e087435f9a8e7fce886a8ed88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mendut70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f653b9dbed47433e8223ff39d35480a439daf38bdd3e60f294ea73ee5c621f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55968 Malicious code in effective_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74924a4772ee9ebb15d7712f24113e3d2f9e0186996efab6f6dc154aa7ace05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...