MAL-2025-83914 Malicious code in cici-dradag96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63b262d5171fac065cc2e45d2a8bfd56458ec0130aefb57b0a6c5cc53f8d01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92875 Malicious code in zaki-klentik63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51cf96feee0adc940f44c54d13c7afd2793e23991d7fd33e2aec7051074d063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-gembus40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7849ccdebed2f88d33cf0660de2ad1242e6516647157553bca3fba7e0237ebb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4831b16353b1d5a7b93b5edc06b02e1eda9113b734bc7646fa4c1736472d4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80141 Malicious code in nadia-tahu23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011c60993dafa7f097721bbbc3fee5553d24032c494b6fb7cc013303f68d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79061 Malicious code in irma-wajit50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f17f3c1a45cdeae1914a17c028d67193d0e9e87301cf6a58b5ed50f9f21d5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mieayam12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae83b48f65d2c903322d05873514976aedf1dc0036b54e12200c935270269b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-azure-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1554280d5d97309dc985f61e65d2780a1122980cdffa9fd61ede75c148a047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-indigo-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ffd48e718174e6e15527e15db459be9830771eb279622f32987ea58e17d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71117 Malicious code in thornypric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971747ff4396df72c7620410bfc1f52e5b8c7bc382d9f284560d4756bb6e8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klipo17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d04bf0775ea3893409e597aad6285ad8c7efee6506952bfb42b54d8dae5b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gulai58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba502d07cf93c79c77672af2d13bbde725d607473ac5ca79a9faef670723f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kemplang54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50dde158c6756c6fb255ef3a46ac2a157b2579055a47df650fa65cf30815887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-otak-otak87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fea631490e8c37b86db19f19da5542842622546feb3bd8d98a9fca9a225c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis48-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8246623414fd474b1b40a2a291de1230bb6d67bb889bf2efe8dbefe76c444b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-moci12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81e9f401a74d2667d4f47b66a9dc66378ad0eef781e1d7cbd6f003e536665b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66078 Malicious code in wati-oblok98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1647129b692b27532344374d2e20ca70140972cf0d9ae9bbfbfa65065fc3236e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65487 Malicious code in surya-rawon66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ddba8b2653b34e8c809a9130cbf6c240a0f3f2bdd82effbb5147a9ec597cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba01daa392a06bbedbb5542c10fabbacfdefb8699fee97dc7ccf00a9be01007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...