MAL-2025-100097 Malicious code in brief_anaconda_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3388e50941b40c38f318565c3b36f82d6affac8bfc810be2f3f95d4a73003432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108101 Malicious code in right_aardwolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dadd8c3d28a4c540a06419035106ca132c12ae8024efb339a49994c4c9fe54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-mieaceh79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab98da6bf60db8a2232ebca9745161df2b59b623e4b62e6d39aeda658a3cfae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kue23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8042e46c86f174ef638bb1c26fdffb04ec4862c205830519af448ce778f6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67b3118b22df12ef47adcce4080305fd2a28834a9072d0d4cb46ed01d9ff1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938345bb44f4498560d60b248f4ad68a5e62a46dcf67e2c111877f1daf5ca7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-getuk27-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93991fc52137f042b12612a7e300da756eadd8c0bf47ceb7bf435bdd2e1c13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kupat59-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35983f77062195dd7567c2cc6ddbc30639da14696cc9739291124775130f1aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102775 Malicious code in fitri-lepet32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdfe2d60b8863e4ad20a5a6d545872b29d39b54bb461f9341fdfea80c6d38da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106139 Malicious code in naked_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115f12f81911c5863a97f7ebc219a8aa2e438dd6cf8119db4fbe87c7cab6af13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brengkes100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383031d397ce4aec834854187963c788c8fc9c0dfac241e61e102fdf87375fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rujak48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d02a744458124f62bd04a13da48cd4f71411e87140cd235cff7f0b8a13b49e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-asinan41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92aa6ea6d543c1f26d1bb76ab6b948953ea6d8061fd29c77145617beb68f580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5789a80e040d204966d33b0e43dbfc2feb55d15c65d186a6c7a9bbbed5896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gembus45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba87c7f7a0b1f55eb0b5b3c2d1c1992613a964b1d1ea84a8137fc8e729dce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108624 Malicious code in sheer_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30900eef31c7f5b3c52c47f71b69c3a2bb3506a967cbb898c9c9821a4e32db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106981 Malicious code in patria-serimuka5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc0b034e3828349a3778d97cb2741094dd2d7dd0161f0db3247e0570d502f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101721 Malicious code in dono-peyek69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eff2c300fe87e55e2943b6a24866e77d88bfe5f590f406e004b522ad69856c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110377 Malicious code in vayzave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f864fabbbb93f777bbe48bc9e1635efd2c02924da821ce2114dde4cfc9037a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100238 Malicious code in candra-ruwet49-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5723f491cba1fd2d41f25695f5061a61f30044597adbbda6bc8034fbefa47ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...