MAL-2025-88023 Malicious code in lutfi-keripik45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf5623d7c292375647a5c22df5419099db7ab389f842e746349c7017fe6dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91929 Malicious code in vina-papeda67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae24ac48db5a893fdf49d7025264c6af4d01b19278bf021217f89bfd6230f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-soto28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367c4c842d59a38e9b938cbeed735e439ff5c2a03dfdaa9ae85adb5882788f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80ac7159da81fc09555f242e7ae1d7fae24af7761b72486980cd7898b87b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-ubi70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11884f84bb9dcf4e4b72b2133eada9aed82f00e8524aad562baced50b71c6444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-keripik43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0030006582eb88bf579b3989acf07e538720c1e3d7b21fcf45c8e1bc29258f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-jamblang28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cf940157b64a30486d09036576da6157302c2874c8c63e236d2143ea9a01b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0edcbe7350bb0f57a3e23353f92eb6029548f1f39ceca5f791315fb891c510e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-nasi21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ec66cb66a39407518dcea1d38d773c237eb101105f0e60fe3359c65aaca63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tapai21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b2285e690ef462449869c7b8018639bf6970baafea49957dc87a967f7f0241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ruwet59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02474cf8e6d45ac3a34b9575f53d9d2cf46b75f9654e8ee0d8ccdaca8184b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kue100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aff8b3acccdb3c8fd0f4f816b4af2714c50af9aba3e9d070ec76c6bd4f93fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tomat54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1959a59662206b09dfa369d5f143a41a9334c6980b81f91ba78584b1811e65ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sambel60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd83bc343d2411030fef4aa8935e7070db31ea8d5e5c5a3d26664faa5053cffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kepok86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b75791ecf60083f96e7feb6625f087218aaf32be4045c3a71b4fd6142f579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-lepet14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c66dc8578bfae1d8145d46400586935add4755db93c929b2aefabf47c23102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kepok41-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8bc3af6a56d574c52bc4c6b519ea93bc15bfe4027ebf568ea19e4a7ebf6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gado-gado56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7228d88e68a8f038c2867500843e443796be351d262d776a3e91386b9bbede62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-martabak32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6e1fcd754a947b49f0180bcc5165f34ec61a9035b52d56981047690a63cb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-jus39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56eef9a17f6003ad5bebc23699dac2386182b83b627360e97355fd2e82f235b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...