MAL-2025-85699 Malicious code in friendly_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958ca379372c94ee6bf2b048d9050b623ccc7ea44ec05fcb3f85b106b550026b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ongol-ongol15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66f5117d9788b74ee1b400c246ecf3c3c38e460673835ea7320673028faf3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77175 Malicious code in candra-otak-otak10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f3ac1902f6bd700cc7bdd94a8c746eb60627d25ed08bab527dc99872d236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79167 Malicious code in jaja-wajit37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d229c39d500d6c6f6f7ea5fd2da5072425a0b626e6586bc6ac06056045438210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasicampur24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6561007f55e7100c32f05a44a0887cfc70433464b352233371d34f242a9270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-soto66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7c3a4864afe94d5ba9f1258da469bab103a3a545324268205874c422c83b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74055 Malicious code in laila-kepok10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128dfcb61a872973e671a7162a5f33be6249a3257aed53de809ac184f756f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73138 Malicious code in gita-jus9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbdd9f7b1e22122368682c6af1b6d740baebaa72945462a79b3eb6f97836d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72381 Malicious code in citra-brongkos84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc5c9000c16f76cc18fd6f83a316f6a3e362f77747eca1eceb69c5411c3477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4171f5d9de43d178f4ad8dd4afd2170c81e4d27dd23aa2285593dbce6ec428e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208abc7fc46e160809791619d67537098d88dbbef1f9e6a2d184c2f33fffc36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728e6fab49ab12d5c6aac533f7b9ced5160c31bd77698669c55567438151434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54217 Malicious code in putra-klipo26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490dd28e84e91e8479a7a8abc5dc09762f086ed05916a21ff1d82ae5e9ad1207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54077 Malicious code in oktafian-ronde65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38d624adb35c0eaeb51e0b7571a21b490df4523c319ee48c5459c4f03e84f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...