MAL-2025-57114 Malicious code in joni-soto4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcca3aba261bbd6624d0006391713f15503c31e1014de7d805208ff05b053e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-semur88-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af9b1c715a3c1e5f2918d4e50f257a7013ad32bd2398240737306a2712cc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-lutis11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55486ef04dcb4235602a970131a3514911308423e5666083dbc4c8a9a56fda0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55401 Malicious code in beneficial_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e792cc0298140cafd3d0d8d9c6a98aaad27a1d5f09fed0d68a611fa955286bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53744 Malicious code in irma-serabi37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb3ddc03005601746372a383e7f8b32a2477baa08a66b415c516b6b30e48a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-nasi94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321e5d5fadcd38c6e2b8ff28cec3878f501cd0fbc985582368debd1f98fb6e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-mieaceh53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b8d6ff4f0d64aff3a5c829fe651d713a1145d462b8ca3588753ef162478028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52825 Malicious code in hadi-tahutek97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554181e30763f44bfe0aff26204effe48a4dbe615512a702ca45e3df5e6021ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dodol99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8186fa554c1f00ccb8381486a52ade5d2c67e64fa04b2a25fbe7c8e50b2056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-gado-gado3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e05c8e9eb5753b432a9915eaab111f75059b39617a22dfcd105b7ac63c144a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521a537102c31067aec8f8f2205e7e9d13f0e5d1c06f84b3b457e0b5af476e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49750 Malicious code in agus-gaplek92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97c0348433d41d60d1d5c550793b96cc0b5fe4f4a90de160741473ac392bbe4 The package agus-gaplek92-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...