MAL-2025-89649 Malicious code in putri-empal57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0123e8e8cb8500e2538e1a70f7b9c0cf2355b19ecc85ac81bbbd8cbfb74ad68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-tumis24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596e7c3c9549f7f356a64bab76742e81de0614476df16e5f0fb8da3e041879b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-jamblang68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31236f161249e9bee40eca60727cc22e4416eb442157aa6d6dd9630acc187923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-brengkes63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32357d68ecfbdff2b05eba4f77bc70152434bdc2cc1551cee85af0c5f84080b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-keraktelor13-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5e5430724eb8c3cc928f2389f3360cc4dc7e0899848c0ad8f5283b4dd55eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-tongseng14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8789d37862ac5fedf7b0a71a393d77141238ed91e7426aaecea445c35da7b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-ruwet12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e273eb92358a40992f28fd79b78f9ba2bb99ca29d69553b8edf4083768fbd86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lapis53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2891dd554316776b27bd6a7ef5271251e7064fedff4ca7c9cd2c815a7cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34458b9501fd8ff2b11814d2085f9c513282d775435bde5cea23ee0256cb788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mangut35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd22ff4496df2504eb87e3619aa6acabd29938e9cfd1c28ae53333fce68e2b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-moci73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abaa31decdec2d2aaedb88410495df56f1ff0dd4fc5fa06f3ffd364896642fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-toge71-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf606272a0959475bb0da890e6ebe14d21505afa1aec4b626f1d7f168a7e936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tomat29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3f872b6d982944e6f6ecd8754f6a2a771c50bfca1bfec80b9de01e7e9641b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-oncom33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b104e26312687c04e38416d09aa231915d05d984fb9a949a6142ea25e88a3f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647d08027baca5c03db6a2d2d694e3b190c63f238a7f27b257015b2d97a93489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-botok64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab226dc0063df81686a1cd51aaa053466cc1a12f28ad22ad3a6789cb0e30f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351c4d6add695be8b8e6dd5c2dfb22f3e5de93efb310bc14ad495aa26c664c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong44-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25ff41db064c6675456f794d30b3f93ff8a152fa05ce5be77d47e10bd75b0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-tumis49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec9ad3557e1159b075cf87af8936127b748432619391e66133e684518e8af9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tomat71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6286b4235d4296810fa4fa20a0b6e2bc1eea18d76f58a284df446adeb35a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...