MAL-2025-92784 Malicious code in zain-ketan37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76f61b8813f0af90302d319c48678322a03a4418734c697685cbba79d08a14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84098 Malicious code in citra-kue30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b7212873083c66cbd0753fcd1abdba17eb55046faab42b1c87b766585c8e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90723 Malicious code in special_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6665a9c2fe64e51f19f27cb026a600fb2011715add212641b9ed19f62ec88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92782 Malicious code in zain-keripik7-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dff79e2757be58167dd5612ab079538613ce9464ceab9130edb7490f1350071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89002 Malicious code in ocha-liwet25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca4936e2b482681fd778444d2cfc490375f07b7de8f36b72913d1445f52d2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91344 Malicious code in udin-gandul60-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7de3a399dc461aeb158b33cdeb8700bea1900562a71fb70aa8e5867362d8a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-liwet28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d941a48c5d34045a74c5807b83dc35ecdd6e94c5f49171aa8a4473671e6c888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed0ca13ca282d5bec16808536bdbe914d93dd2918bb45747155caaee2fed7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85720 Malicious code in fuzzy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e236574e1a2a463ed66c4a0725a3fbd54296ead421da2cce0e606bca7d31fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83292 Malicious code in arif-mangga97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ced1d2c23f717500adbdc6b30ab9fa1a5b9779cb6ceca04731a206f8f680f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92082 Malicious code in wati-takokak29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4763dd8ec929e80f5da89369a217c31b25a143152b661b39e46161d99566f297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-taiwan88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5ca100d492ea03718edf312b320b9d930f8abcc58af3b80ef9cab516d66776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88999 Malicious code in ocha-lapis50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3018ecee975bbfdcb6e1e0c92d53dcef6ad22f47c17d9b7ebe4b228d3f3c9db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-naget89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b222644b8d7e6cb0ffda9a5e2fe01d7c538e56c62eefc492af1f3c93ce498827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-keraktelor14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d5856e9f1c98b001cf095277a2576671f4472ad6e1ca1455ddfd8fab89fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-lumpur51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc69cba1b829859e4ec863b416a6ef15e35ea8f4c583e98eaf46a0fe6f874c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2b1783461475129b77f87dbd7864ed22679b1313502f63c0a57de4c5576961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gandul13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef77353f9a66effc164ae52027eb7e7dbf84983a74b98e0a2909c933001bab74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03eb16bcff464f4fa4fa9009fc663e10a9bd0275fef66c5f9bd51863be9087ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-keripik12-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c045a9a679d5a4c2fcf59b071a8cf430dd65f20f375e45d9c8a0171f337f872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...