MAL-2025-99886 Malicious code in bella-asinan72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5561bb5ad8e0f552a5388a062b75dbb3102d853da2c7b806234bd0a50630adda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109547 Malicious code in tense_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16614c1fb332561ea55c891a73810463b9dffee856df04f525e7c0d652a66960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100207 Malicious code in calm_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fece7af8d30f48ce30e637b4f10af50aab2eb9c74b017732a547975cded8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109873 Malicious code in tuti-liwet86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d6df57f9c7a3fa8e62c0c25ebf5892a677cdbc9890de93d1e33c892460d4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108784 Malicious code in siska-sego51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84623b45431a7f9d4986538a0cd3dc0e6a5fbceb0f5d373d481b5c33077f0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-martabak96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dad0be702c12f6e0aaf089f9fb81ada34bf42a9d210acf86738c87f496494ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-rojak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6895ee8c4ac018d376d53b1eb0e9fb6d27304167faa42ad808b936c5fc2cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ubi50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b036580386ef81ab9779fb6e05d7f7feb19b9c51b000510c38793c2c89bb3986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-pisang77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e32dcbcc89d4cf0aff3a709459a83d49f3be62e8a7b9825b41d967c5c6e7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes84-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc64db6ec6465dbf98a2fc4aa9bad9a09e146ad216004613c0883dab22abfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-brongkos93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eedf5fe8d36e2f833bd624f1e933f8769221a01296cedcc1117fc960dbaeea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1ebe92b81e996cb2430bd3a3abcd3ba64f3f5d41c3c07d9dd6863ecdfe366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-keripik18-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0eb20f993e31bb67da7eb79e4a1631ec9c66e3b031b5754da100c96236abcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-nasipecel11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367394f2c37e182c6af061101bd050230cb88d3898d4b9a3834cc3c9bd5106f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-martabak21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ace789461b6f52e2b4d9308acab261d93cbd013e989d4655e6082e21868806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-wajit29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1f1327e19092e841296cc727c6dac98769a660caf8c4fda036532060dff21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-klanting58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82301e77c3a7e1abe87bd565394362b6c1beae15b73efaf252accdfc8735759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-rangginang58-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a96b8c8545bc3bb16b7b2f917c1cf972567bb228b8c50d157d2cfdea4fae9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4235842ab77a8704b12b7d61ad0f25a92d8c7447332399dce3920953e3c08fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d8cdd6f4eac4ad6611c375bedf64238e859e74791aaf2fbf95962cd86af25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...