MAL-2025-129721 Malicious code in relaxed_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd539388a86128a5de77ed4a17d37632a9dcc490074a880f935970bd2cbdb3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130561 Malicious code in tiara-lapis72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cb42b17a472402318811c5856d7f035de67508e0696af9091b8dbecad2da30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129235 Malicious code in oktafian-rojak45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94688f03eda490ad93af3e2cb97b2adb6460344225b8d27e5a4a627f15ac146e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128757 Malicious code in nadia-gulai12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e84dbaeb8a89d3bb0185379320f655141a21faaf425811e6d22860a79eade8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124871 Malicious code in agus-kentang9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae50c21ba1c838666e8e8306a79e9fa4c208abfc4b5eb0fd92e6cc45395b4bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-brongkos20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d33d57c26b6388d88f95273fac49706fdac86d1d8da6cbbf83fbc0669aa581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sambel22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a13e8e83423ff25f3a7d9fed8cdfaa8e43ed78a6c2b81790d56c3e89a825345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kolak90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed6738b612c18eb451bb0e8298255d5144acb067aa2951a093bf21d02e4ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-pisang9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8e2547c903952d208c201a966bf58e52c6726480f0b867a07ad65736538f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-taiwan46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8777d685dd069690dbfdf6a9de6e06590cccd63d0cc45b32ab7dda4f0cf15884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e9b3e76bb227642d60ec22903a9caf202d0d0307ea504fab586fbce5ef4807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc51788425856bde98684aebb46ce1c316efd35f4e24b6e29431cebf1ecf867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kue69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6922d398ee26b827212142fcee0245ebd7942e082b019492aad054abbb3cf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-jamblang43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821f8e88adac19d3f8a1ad6ba97d0666b63d0a547159dd485c11e49f605d6b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mieaceh48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6de38385ab77e2a48a9b7db95c75462d3208221b955b8d6006e2804dac32c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-bakso4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78800ae0f4352524c1d1c349ddc7282839802f37455cf4681c29c576cfa12674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-martabak29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29944f309345377ca32e1c870ee804e07238336950bffae0718b489e997eb1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-lapis44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7441af02706122b6ead153c12f7a726c1e845050fd53dacefe3885fcdbde9a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kupang97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e03dac2c5567e234fd6fd4d202f35dd1a9e5beaee919b4c43c2e95dde010360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121522 Malicious code in liquid_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17ee086e63b3c4ae64936c8f7cc8d0a68f41c7b49ec5af96a8caa6dca4f7a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...