MAL-2025-134593 Malicious code in joko-brengkes56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd905b89f2ef7c5deaa823514df19fb719413813ac93fd13ffe8207f8b78a51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133235 Malicious code in erwin-soto30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7499440501c25bee16d1eeec578badacecc7ff31f31d48dec0cc4fec78b354df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136753 Malicious code in rudi-bakwan91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224a9ab232ae15023bd5e70660a1477e906740ef6f6583d526c6e520f08f7617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kacang78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2b24b34677e5d50aded7b249212f55ae645713867acfe2e61aee7a69397806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde5a64040401b6f717136807cc0af6b97d4ef7706efe8ce017b0e869b1fd20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c898535517dd9b629fa03f172215388a97fad5915d5a5ed145d7e0734015d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kembang98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603333ccecff709b5ee609b8bb233d18464c07c9a393aa1d8541565bfc7245e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dc850356a563816bf71d8720de84a474486e15db72c457441f0fece7618af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lepet35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7b633a5dd4b2ff843366d068a329974578b837a1d897c035461533655f4f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rangi96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5672e4976cb8c885892524c212af5cb88d7cd18062056cb4d0074b611d6fd3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kemplang46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729be7d8222be168e6bf4793da92af87af3392d5690419b506a171f2f1b9f746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc3fe3453adf31dffd93596877420acaea268ce6425903a920f108a98109d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rawon80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf8a9af9b2b4d4ac24b2a68f23476767df50089c842ad62a74a6e492341f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7dbdd6cf5f2557a20938a79e0412c93ce0a181d5ea2e430ecda7cafeb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-lutis67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965b69f16e0b9210848b9cca55f575362412c76e1c2a3c45a68f419c4ee212c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7790a308eca0e4ada9c5dd9980570f77ab8c4bebe2b645e3f6978da9c52772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mangut32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f98c9697e28e7e255e8cf28469da3632c6e5ef45e0832212ada9988f6bd50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sego84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6e7ec33ecb61efad632b245e6699247fa9d9b8b8777c0a1b9c8edb3a2f68c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268331e5b9ee8a75fdca60c6d911dc27e904973ed8f7c04622b5948799ff69f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-esdoger50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec03624bcff8838de430127dcec594edc4a95fcf06055c659d7cdb339e8fa1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...