MAL-2025-59424 Malicious code in wawan-bika53-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1456cbf9343334d4d869d531c13df73616c9b93352531a4c192b4b372fe949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55751 Malicious code in decisive_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21fa23bb3c10f00eb61fa09e18a57da4d83a7b95da725c70a8f0d835517adef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54664 Malicious code in rifqi-tempe54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fb053b98cd252486b2e93a227d4ec61f208b53b1669a896cf91eaaacf74ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54743 Malicious code in rudi-kepok43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b545e4326ae2ed03a25eaa93701cc79947a2f09eef407b11ee188e7d70a1345b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54186 Malicious code in patria-tahu4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2accf8d4766fe91f2bb0d1a7ba02dbdc1ea2bb5d043a9008f582734943e7bd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tumis15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d08083dd7a65ee7818f9e0fdeff384828047ac2cfcb93ca499241dec5c37fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-keripik96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99157d8c0bcea5855e69580dbb9e6afcb61892c97c335e67412e9393536dab64 The package wati-keripik96-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...