MAL-2025-108138 Malicious code in rina-papeda68-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227a917b8f6ce3dce6c0f85b1b2a1018b2282a953a2d51217540e239e96cd482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104103 Malicious code in indah-gorengan59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa8d8e4894aa019a7fe0ee474c6afcccbc3f3e846a387aa5ecb40fc6efa5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d19cf1a4868cf74d6ba9bef368d48114a0c9ba13e82c9ba231b1144ef02032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-telur24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a9f41e4e1694c8418242576c74d316ea10baf9514e708fa9fd947cdf9b6093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-taiwan97-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad774cfd4d6f72df2b9d840895e45ae2a2077571a05da4594010631249e6356e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51bc9a1c805f3e350b406a2daddd674fcd2b1bcca9aa7245e2ba96fb55f0bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21e3271c5fc55b30e501bb90b622acc45db7f6e59849ef0ddbbe21e8014036f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-bakwan49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d6b8389fec235495b23a3bdde66bfcdefc9fbcea3b2ee7d8a7a607ffb7fecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-sasag99-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e802b28ec38f868ca35284cbbd47c9ed4bd0966b692bed231c33ef81f18100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd424327a3b19a5de815f02cd038ae386d682d28de205d87724528d5afc59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101495 Malicious code in dewi-tempe62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527d16d3159412ea3c509166ecf8abb90ff56da1bef225e0ce747b81f9b7aecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104463 Malicious code in iwan-miebogor66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e40e42369912687622c2ff401ce8317879bf1a4d672c576ec41972324d45e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in static_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef69b0a4c8eae3b89885bbf33230adc9eae4825d09bb62acd3ce967e814af7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lapis35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce0f9e7b672147fa71a9b865380ab6454419c315b8821323a2bdefd67ad3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lengko67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406d92d377762f093d17abde305d040a23bb7074524e631a96bca4ab2af9e369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-peyek87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85b1e51795a4c32a572f79f2eef8bb21d0b864a3338af0a5156653647f0955f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-nasi90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71597ee59d08208dbed4e0e8259b6995d81c3b26fdddedaba577c9cd058f9c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-otak-otak90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ab5c92ebda4016c6804fd3f734f207563a54b536585fb594ddeec4dc3180f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49537e99f09ee018662ed61ea2371eff8b87005c865d9610c07656ddb6aa3d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110706 Malicious code in wati-otak-otak39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fd2e6f9200ec5f5fa48650a7aa4d9c1e2f709fc667c4cba0721f06e2b6eec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...