MAL-2025-103548 Malicious code in hanafi-moci11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d36354db874cf7f7322034231eab59c63c735c89aee6c364ea492dec124b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104623 Malicious code in joko-nasi38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1668b812ae55f07fe1cae9dbc69184531fef5d21cfb0b31d133674eaabfe47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-ragi87-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf22f8887b7dc052094eeb08f0156f6f891bf64fad6ff57a4da178de9d19181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-soto9-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092aac4301ef1f715190cd4cba0050585464966f140e087580b5660c3a286566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826fe7870b0abf9dd4b5eb707b3b3cebb4ffce3cd98a5aab0b0fb336e37401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e9db3b02c4459153ebaf7cc3ff91062ec7750cc87ac667fea21131264597dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_junglefowl_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a74ad16da994c63ec058a1843861afe3ff5e3f4962e87a64e9dc10bf26fccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cd1722df073a1e9f9e6d510ca240758f6488d1bec2a14508a08ce74c720699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93300 Malicious code in atomic_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db63c1477842fb3ecf11a10edaa42d11df273809f4f30686bbd0b23b667e163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96658 Malicious code in soft_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d238bc7448bcea8cd080a6d1aadb762027c313aeca24a5ab4d48251a577a7340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93849 Malicious code in criminal_eel_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96161d45727ab099a2dd8509cab672040189fe29f8ffb32046e283b5eec2bcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94475 Malicious code in federal_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ba2f405befb017afa23d956c9b0d90572aaceec47fcd83f7df8ed32e7ec108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-lumpur32-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84891f27eea9671bc5ccd9d5477d26dae35aeba337808e781fe572ad64c83929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tek70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c54764717b15cfd1cfdb0195a943d2f8631a16c1bd6f861a905efc45298cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kemplang26-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026b1b073f7572cdc2bdcef80971ac9c2744c03702f68fce59d7d1996eb4a067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-empal95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a731d2410f50220df62230f334ba9da8d4fcc0a65ed58213f5eb6313df38c030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de10a5ed8c366fa29a2fe864a026cbc91d8ed6edd70a9f6f36e7a93ca07e59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55789125ccd2b085df77ac2d564bb961cff68616b402525451d237756fe65427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gaplek80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4013a97793b18caf8c7b929cf9d6e003842176b7dad6501d40d6b116d93fe13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-telurtahu33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477265864500b2a5606ebc74622885ea54ba3937faa8ea4959f0b80166c0f420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...