MAL-2025-85087 Malicious code in erick-ketan96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ab040e784af1c75acb02f24923cd477e6f4d844bc66d9059377e4fcbbec797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90760 Malicious code in stingy_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65852c37d1e6354db45293dca043bfdbb41be5dfbba30633796e13a1fc7becb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89173 Malicious code in okta-liwet85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8ecf761a6cc54a8841f1874beece770cd057c42db748b94cb028e2a34d41cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88791 Malicious code in nina-gepuk23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a7fe4f0a39f29e1a29033748f31419ec86fdcd8a0f8ab41b1be47117c8e03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-keripik4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95be487d479ded0d21de703546aaff245d0f819badf1fd365c9e588fac46685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-lapis69-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94caff6a685a2924102e3f82567dbd246de26f9cccc7cd9ec86306c44a79f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kemplang52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be2510a1d9b3742f9f4b07ccc65d117b3219fdbd8cc8451a6aaeffed0c83fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75386c718f3652e81e3cce9b51e88bbffa38359247f841408ec99b7a8dec998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-mendut35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dfb8b59bd5017aeef98d6d4562ea03a0fb782db9d26ac38f8b15254604abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kripik39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867666c5b0f895833281685b0ce3c8990da216ddaf4a1f45a89b79184c612c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-lapis16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd568e3cf172d2951ae06b72e73d9a0c7f5905c64b1350f0eb1cc9df619391e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-papeda64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d8a917a6ef82dbbe95c97d68d2f8a7133fdbbf84bcccb7a0db235a5e1fcf00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lupis42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b371aea4b21166881ede5076af9799f6da519f07d4b95134dd591df6f360d8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-martabak27-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0e2d8107b79176a74daecdd5b69f1d263cc6cfab5eecea6a1956a64728ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sambalado57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61db96b4b688097e642c98a9f63d7086101d2519df971d36781a03f0b058a33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f61a37484fff71c97fe6eacaaefb7a39ce1a778310b6255158a35e43b47542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057f56e7f013a55a4c6ec543a9b96fdb49cfc4d5c93a63bef5a021b219d38bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evident_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868cfd3a7fea561178ac4c7882752d69800da232fb91206648a0644c99506bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tahutek82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4c67ff6349149d42fc4f0d02041829d0031456c80da021fdc81cae4a19bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-jengkol30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0974b4c79d8ad4488443b9e55c19181660289763a7df1527989eea53c57045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...