MAL-2025-97543 Malicious code in zesty_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e391a755ec38d596cc3ac76d2cbbc990bebf0b3cb71ea6c9ddfff74431249097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95930 Malicious code in political_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b9c4b11125f81965370514b296c134e4e5b268b6c7a37f18b3b11a685066e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96999 Malicious code in thoughtful_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54a57d7c4fd04060d9cd42c40b70d15be939f655a9e1b1d8c145f9406cfefbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-asinan33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399c6ad6a88833eaa451a4a43475dac9c2c5c0216a7327d26a9a4e6875dc2c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61852217270a9029d05091c9f3e980f0fad1ccc2f8d29c65078051c985b72e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4dceff75da5bc1a34cf4567cca4f3d359970f48d425d188f021074a9cda4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8aee73330fdfc051a0ba464b42f669653b48fbfb41091063ca3e2702963943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-gorengan37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0b3aa5e47ab7518b60a8b8536c1eb0d87ae11cfd0ce31ce315fe7c56f8c326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tahu26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a222a95cf7921efbe7fd394c2c55a5f9e0e0dbac2c34a18f9b244be6add3bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc5b89b92c58542a60e03ebcbf193929733b05c2f12e3baccaa7b776cdf6875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-ketan78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b490d64383228f8afe09dc3da3ec64893fd419a630335d00fe715aad238b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-brongkos76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31830b059d5e91e8c120f3e139214a74140af9ee3b50bca320346917bc3b0471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-telur44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc6f162453af4ec9ea95061bfc76928d77a79ad6a510d2f353589a6d6d368df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e360bcad4d83928cb03ed6dd66ac2e069c39b32d24abe217b13ea671e883861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-asinan18-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760a0c26cd5c10da365ac3efe6ef00a95d1f9ac286fd08a73721d40ef6b4e9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287f1b0f7dcec953e79aade2cd9e183593d164e1b56f7d3677a67723c0f0503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-otak-otak25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef601302c1dd671c6741d8ebb1a0086525c3a05c23ead0b6f4f32672c886b2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue5-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee52b44ef53513275972083e163fcc622f1d1d4f7ee5bb29b6f5cbb2971a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-moci6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b0688a3034116630b0040c40dd962ffc489d148565f893b48b4d0b10e37240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-klipo77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d733802c3397a51bbb5e08eb4533cd2f387d692bf842ba69c0c90f1d662a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...