MAL-2025-83231 Malicious code in andi-tiwul30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89446830b3bd2a920b9c64a5110c915595f8ac681a3f62e8baff1552b0e28e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47250a513a4af52ec44927fc30d85ad7244186be7f624c69f9794ee72c7c80dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gaplek83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1964f25262ac585c7e72f7c8158ac275075bd8e68db86be3494e877df9dc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81304 Malicious code in silent_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c9e42b7897735395b2ee62f4ccbed413a1013737c873cbeff70372a49aaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81879 Malicious code in umi-lapis36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72146efc86e0c324355c2e0506244555163c8c63c8b2136a89b58be1ca2a9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-telur17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7482ba858ae8f3902b0843ef5eff9b574599f1033795e3bd72c4ba7e592e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d105114e2f18af548be7509a7263015e8349e094475bbb042a3e67dffc574ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64697 Malicious code in okta-tongseng70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c502d5a27a91b0ff40c21e207963c4f4bd840ab619bd463ae5e444c7918c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bringiton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7ada11ccaa528de1d1d49c2a989553a3968cdf2e9ed1f1bf703ce40f667d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-soto3-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f3ad5738151f314fd26d754292994c59ca000c2ad38ad7289e5ad0b74513dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59440 Malicious code in wawan-kacang97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb1e1503f38181637b7d001fa354fa77dbe25f1cd035fa584502306beb9e8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57073 Malicious code in joko-tahu78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247c45af1e90f76cd79e5f484e93b5c1be53041bb02b97d6077a1d10652371c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...