MAL-2025-86336 Malicious code in hanafi-rujak73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df3a39fbc084d36e524728b23512e847f105bd94ec3af5862b100767cfcde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-keripik74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bf841b77772276b728d687276bf700ebdbe6f6e0041617e33655142249564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mendoan92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f82e15c7ec743f0f79a057238a6208746304084eaaf5489d02b731fd8388e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sroto21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f1fafe3b081401452b3514a11388327651f4d2f6338276e24362c734cf934e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sego64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588f289479378c48148c4e992deec47678ea7d9cd0a64dac120bd0d367fc3d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-gado-gado27-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f1d331c3c0e622197cbb1cb1b7f36d167be489a4d7793e1a1dd59d627cc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-getuk77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fadf74a6f509e97d2f5aab16d3ce3cd80a892ff12d20d9102f50546cb7c98f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-jengkol35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5724119a9c3238ec6f4e962b3f2a56db606e89f8796f90daabc2e6d22843e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-lodeh90-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7485386e560d6484f83adc2a32a9f6d2a0c64b9807553fe7d26370a62f4ca474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klipo56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6803b20789c624c3888b937be1f64658110648b15691ed4bdad20f5c078791c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-serabi83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b652b132b3b0d9c377be53242caaad51f0306e3bf87c796abee410bac291937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-rujaksoto28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61006634a032d84ca5d41ac2eab9521ebf2c3858c06fc5a455074697fe2eafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rujaksoto71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9071b1cfc6bd11510033b8df495a8f5ea22de26fb7f0a1f747244fc471e42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kepok15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c66e57f12182df05e5d30b6b74c972c700dc684d936402c510eafea15fa98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373c7dda57947b0ab8383314019294d3ec96ba09402089753974f815eae19242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224b3ce740fbeefa4427ef4fb4fee0d29740ca5eb707207989161c6eedf8d75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-jamblang25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf592df59e92fed2a406b742c2bac9e4b030d6cd9f471417463c28db50d88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-brongkos58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b07aca083ae53b14b2a54557916507ea2c01b5feb0b45096437ce2f18798db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tempe29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ab4c7ad73b25f0c8c5b712d615b1e46c77eca1d3c3ba2ff1ad7aaddfaf8fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gado-gado92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ad29c51fa81fdba9c426f205640ca5a4714ba66168a2f2be6ff9037f512b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...