MAL-2025-125470 Malicious code in citra-dradag38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46bd260f09a4383ed0e5d871b329ef82d44a00f873bfcf1b885b6cb9511b508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0beab52345c81adfdac4dac735d25fdd3d023d8798a89263abe382adbbc895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tumis58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ca014a88318a71878e3a2d18bd40856e6b81c784ea9e1148c826c24afcef23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-teh7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f56590366a1f904672b29cc49dad0806b03347a7ace5d3e1c6f510a86f4752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee428f8fbb4772dc2e5c514af2102933f98cc014027053d8dc29f1df77deb333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gaplek71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e398a342f77cf2f9c99282dfe221daa2ca3bc20cc66dd978a17e6ac15f2f6026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538e3ba3989a128208601dd66c3a5de472343ee25319e38103a7dfd2dd69bee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keripik95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d346294104e602d2e671e801bff50d02f2936cdbcbe03ef66f9f22df4847f72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-semur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de8f3268dc806f3ee4ba6b98e6b80f39e069bf74ee9abf89924fa98b095eedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-mendut55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744da083695d405f29cd2bedf36e50a1b35c5725ecb56d61e8905437b8cabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b409356f4ccccffb3d6c3b6e6f6ba4526aa66e3ebc58c7e55b6e3546d9477d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gorengan96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82adb7d512be1cb49bf46ec42c775a3dbb1dd37436a0142d9b2374f5a9ca4860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dae2bee2d2fe1f5b1552a7a580154a4fdfe9e2f3d48b525e024463b30d267e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-esdoger89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c21b98ef26a22845fb21af0646f34ea45cd9bb4ea90d9ebc96943886d68700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-jus60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f816b136e4ac69c417a61800605bf0d5a0aaeccb46180c7e6405caffc6863e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-tongseng89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443dedac32f8f5638a1e8c8c85837f7f6841189406fecd3d000400320bb65b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-martabak29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29944f309345377ca32e1c870ee804e07238336950bffae0718b489e997eb1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-otak-otak1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ae682da361cb9af49b99901d8f399180755e4a5127bdbf527456e7c15e204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e51625e1faa03e26ba295a210df6f06955cd7824f2ab0ee71f2f6b6ac9297d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139e5f48a16fa17d423730550d39541206187e129784cd80dab4f72f49a461e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...