MAL-2025-85445 Malicious code in fajar-oncom4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567e5296baecfca567e2a4e26d78a0b5564866025aff7a1f71353b180c5eaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91713 Malicious code in vera-mendoan92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f82e15c7ec743f0f79a057238a6208746304084eaaf5489d02b731fd8388e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89543 Malicious code in public_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8004b8d81371dcdf4753c25a30eb9d5cb36a385ebb8f4f1709f8f849fe843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90104 Malicious code in rifqi-moci95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d91e8d76977948cd7315b4e13ef1d96e3ab0ecf9a5fc9414e3c8a2cc6544227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7310c06c312381ac13b5376dcd17f1a5be061a71ca5b65a06cbc68812e9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498fd1196a1bb5ece6b4f66b76ad5df70e4998ecb6ddd0181d0da59fe7b13fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3ee1bc23d7c504fc1e477defca2bb2fc945937aa9ed949985d090a7df41e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5487e0df93322e304d5b22644b78d8c29ed6b8110bd57b88aba7978fc862a41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-keripik63-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5421bce24d348e418b1bece3a038f272f4ad96245dfdd1ca6c87478c82378ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sasag61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba15566097734c68ffee81f2dee1cae53ad3384ccaf4d02ba00abe8035c1fff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kupang11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1ff953f7e95982e1bc00e8764e6b7498813d90eec375ce9772b0497b2c370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-soto29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad46a0bd75f8a1eb8b05d48dc312f70d1032632f0cc03cde52373e79ae70906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-naget81-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e7af3e531e1057fc31f850bfe480fed6885d4578559431a8871568c37c7623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kentang98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb7d0c88d5989688ce6729588d32a158b239fd0e1d1e924ea32ec30ce09fc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a4d94a0b3792f0e96f7d5fab8473daa21d8fef57b2bbb71d11e794b20d3656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb1aa071ffd6cd6d6e1aa051742b5c940cb89223d19ca5ffb354d2b45ea22af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-ketan55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d4aa8ca0b66ee31eba7f23f380d34df174120ab369c3d13a1d74e4fd4b0bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-liwet17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582a27e19e39732faeb1ebc98545ae34688378b224991660dacbd97855aa72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-keripik83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6d0a148a988435d65739cf4b46d5290eab03f2e5fd1823143701870e923424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df90f25ba587e5dc6b00f89dcf6c039e241ae2b2a218a9a32bf18a7e363f53be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...