MAL-2025-83834 Malicious code in candra-otak-otak23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8645afbd960c77815cfdd2d80ea44e563f708b57c47ebc41ce9798e9916777cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90692 Malicious code in slippery_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9943c1ed172893c021cb45e8f0d68022b006a1bdca93b58d252075bfbad87226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82952 Malicious code in ade-sambalado18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22dd613c1a2225e056de9bd3d1783c991b8e33b0837acc695681594fc20553a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89863 Malicious code in qori-ragi65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63b9d2e8c2fafde7a3c1fef04f0a47b0efcec52896542cbe64c192c6269b714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88852 Malicious code in nina-tahu25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f949caba94e680140ea20f361d4ae9e9c116b6f73f6fd48660aac0328c6b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-empal65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a185569dba32b5332a201af4ae2c9182935ed842911da80fe3cc9578b722d647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aa3a60af3826874ba09622ced71bf987191d905b5eef9e434e021362b96ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ef7c0dc92a2db9689bc5104ab4eef6a08d155396b271013454f884fc621052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mieayam37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d13740494ce56c6780d36683b43fcd4785b56fcfad7fc8e691d5cc4c11d9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-gaplek54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5265b5ba05ddc151dc2d006893375177ef85a882e05db6872eaa3f3c1278ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79721 Malicious code in lisa-sate48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989ace5a5e8d9739e5cffac8cac4817aa2cecf9517937cf0f83057ea3afa94a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gorengan78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d6991a4ef3506e467ddd7210fd988de961331b80888a27c9aa0ef63a1a1b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77744 Malicious code in dull_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7edc8e4364f31f10fd22533013799efee0e2363f4dc983c72071cc1cc7c4477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77504 Malicious code in dewanto-kemplang58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f0f3b5412bfb49441abc2c9cfc6f5dc2b455bb2ab9e55283095a7cc73a5c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77774 Malicious code in eka-kue1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa526207bf4b6176beaa7da9358bd19d0fb9d268d4c48fff24f85fd9a9374b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79572 Malicious code in laila-martabak37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb3cb15c788b83864a2bc24b84c4e504a9dcfe21183d610e805dd07a9803069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77939 Malicious code in erick-nasicampur4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa6d01b91cabd5cf54e97bd6270d54b21f16966e4123ea7255a744e22654b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79561 Malicious code in laila-klanting29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369be4b86454fec19036df9f1d88727e3fde1064c93c9023469efeea7f25e627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kemplang84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecd85e378f6cf917e8c3191a785ff7ca215ac32e9ac0b5147f18185d08e9437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c2757222bdf31f401226e29c90de8c9354a5a9595674040b1be15ca7f627c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...