MAL-2025-107665 Malicious code in quiet_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a7af467a63f5f975b0b810d2d103dd8b85a3897cde7e08ee94f3e24f8c1f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111155 Malicious code in yanti-bika26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56384d17d753e35a38ab51d1025275632e539febc18027e3bf50916ba896b7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99932 Malicious code in bella-ubi52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db71bea7e5b58f924c34778351f8e128ed9841c55e7eda7ac21fe52388402ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-esdoger5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66de7716c1cd2826bc7b7722902b167ae8687b57fb2498358c3a770b6fb59040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-getuk4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479a8a48bbf3b92a223b9b1a5b8e236b1cd8b2277eb63aa60601ed09e28237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e134b4dccb91d713e0209aa91ddcc4c32d4a9815f9e786ee19619c99ebbfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104616 Malicious code in joko-martabak40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8611edf23aeb00867616b1b15bf0425acd016b6b166783295e2eec0999a961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-getas54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4ebd9880dc3a94a650ac3e5e06af48df70f5fbc106ccc2e9675b629675ea73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-tomat70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ef040d114fd0e5e7492f49fc697136ffbf815a684a1d9fe042c9643aceb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-mangga12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277289edf8b351b1076737d0e9158e0fcff4286cf9f3e32beaa49f7098ead650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92af1f38a3bd2db1e8bfd05cc9e23f14abc27a7426ac7d5296b9289bc66b204b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9c9e95eef7326f7073dbe059bc72ed5fb78a32da986dbb0bd0e812d0abb477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kepok38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bb54c49b9e1151bd275322acd8d29ace2cc36288d756785dc8011efc6caf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-bubursumsum69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bec782e0ff4de80f36771ec88b8b07aafb789c7b9705ce4d5d3c673789ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103226 Malicious code in gita-rojak62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a6178cda7fb2220e9ed8746571b768605c4f79fd4160297c5503a9994df788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-dodol52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc34d6d8d43fdde161af8e4ab588988c9246a8b16c96965f60ae1afc84b0e750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kepok43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d75b27f2e290fb6f28c48b4fc27a84e6789e2db0b0d267dc8871a8b5ed30db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108720 Malicious code in sinta-lapis85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cedefa577654652110efec6115dbf38772a98a71667cfd7a090eaf4a2108b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-pisang70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cda79f3d3b802529e75297a4d675bf37612b3cbb86b89ee43c582ee196d16db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ikan86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08275a1ba3cb6c567d27c0ad95f8bfa07ce4e7bcbf42fd57b1ed592098d72e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...