MAL-2025-131735 Malicious code in zain-tempe97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f8ad13321a778323784702cdffcaf35b69ccac7adec7a1ce1b64ebe6d1a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasiuduk39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4201b8a21a64baa63f9323b267495cd2dffe24c39ae2b9326c9b4e30a3df972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d8f79dfeeab9fcf71d3c95bf573ce450b962665e0ed18d3dc4139329141a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d09dcc051dea38da86667f662f6711eb2523ed3d9160a7f3a7ad0225c2c883f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kripik78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a801c29e3ce902e2bc5f51ce39beecaf710c8fa5861bf76f0e0b80e13cacd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ongol-ongol93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a933f90e08b9463f1dfdb9d10a32771f97f79fea232796384b8c12a23be88c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-empal20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4929c8069fe9d857874bf46b4bd4cc20fb80cbea252fd76b32f7d2ca192a21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-dradag38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba5168ba82126c950e1ff1f31acd4d212879f543aaf3a22de56e803f5e8a248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca9eb285fb7b03e3c6c0bbc3a16f8e5e90ae9b40ec14b78b18403ddc64f5897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d87e3052a6ca9a85c3d5b8c8c600e431d596fde66cba40461d5eaed2caabf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klanting97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b21f5d16f52103546d7a4cbf047ca555dbd9821d8b984320622da025e92f6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-gulai58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541c99c9c793a35da07097a44b3153d2e65e62bed90f24af4448bd80dabdbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48b626f0136c0c9c77c7c8ce55848b51b0d5f146d147eb4aa2a65e80b12021a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318b09cb38fb219a188e83d6e3bd0f197b5d9549666ddfa2ab0dfc2576ad4514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rangginang5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78aa988d78aeba6de62d6fbb4dcee09f9aafc39f6ff30d003fd674c9e227de89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-mieayam77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff00fd6724d3184f3831028a754d08ed15904862a128857a0b0c453336ebdf15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a0579cad4510e7750240331bfa22ed0c4761b3323454deef4f9e22b7459d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fa6873d69c5040291be5646dd2d0e327de6f6bdf6b68b00acf23a785c7a84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-telurtahu68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b534ca5b8fa5715d3e8e6554b52ae17b9139ec8ce8ee7f9c2fdad5c21348895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...