MAL-2025-105048 Malicious code in left_skink-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0ff26704d677ee4c1b79838457e23e79c3a15c9d5fd3c0d451d6a50e8aa05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c0c38504ffc7fb0afabeb10207ae4cdc8c8c30a70abfd124796a9160c2478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98597 Malicious code in absolute_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd5166d9671b235ca3f992f84668d48d313973d58eb53b133c7fdd9b991cd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce44b77e822af05b190f417da35064e064b853fc2182e292466aa9f3600c0742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b3611d65b39d9f5ae25b9bffbbb0dc5e8aedf5c5f63665851a6a03b3855206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d697b9c0b337713b448a5a90310f9e43aa7757f68332336aa64483f8c2bb8df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly-teal-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6ac5034c81e7268a96ab9f5ad70e95c30d1e46eea5719600125a92a2191ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71248 Malicious code in underground-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480e409db966d159ab97c3ed2bddde8af21509ac9938ef5431690db97bf69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63805 Malicious code in kiki-kue14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89266a06d8b94896940fdcf94a0022551624075e9b4fa8e7251ac248c7865de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62978 Malicious code in fauzi-soto64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc40a46452d378010a9f30bfa32be156771fc8234e5a788b2510a173c81672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56213 Malicious code in fadhil-nasisayur40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5a0b0087171ea245349a5a5b5da606436ca3858e710b66fc33e9b54772d65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bc011fa09f1347e5b42ed5c27f1e24bfaa0c45aa9ad5942e3bd331f6b32ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56794 Malicious code in ida-tempe52-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9c78daec38e12626a8f8456e3e023736c9da73c6e1e13d67455359a44f733a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-wajit39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57fe87629e25db538e98658eb99a1f5b09e5f93a6eb3675264ba4fa336416cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53423 Malicious code in nadia-nasi89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1204f9d686985bf908cec5ad141f81d81b3f52055166c7220c20b99e517c0c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tapai60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042a3a3be1f94972161c11cba62cefd17393ee9df24ac81d21dfacdec12b928b The package vina-tapai60-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in udin-gandul59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed0f53cdf5eb7d5749084cf731049392b79e273b14234f057e1cf31bd9a9b0f The package udin-gandul59-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...