MAL-2025-93688 Malicious code in complicated_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ba48f2e20cc544c33dfe41989e4c42bc08743db366f9acd17623d25c7e0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96985 Malicious code in theoretical_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431337565af8e8d587f3ffe68d2ce47ec5ba46d6627e71160ee863fc0213e871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96311 Malicious code in required_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df1c2907f8592571937e3ad11bab966e7a8e0af405e4b743ea3ac0dd51650be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lodeh35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd07dd56607adcb860a3c10d79d6c73087b615edd526461417f3dedb00d73e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c609ecc191fc17aefcc0785ee36d7d192d30d89742def98d78e93e2e0a8333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff7ead13fd96b4f46d0323353f818748c2f0fd4f1219967ac8f2d4a40640633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da830807b31350d357bd7b4c56cabd47ce3285a1aec8c97bc3f420f76c51cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-oblok65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d969da8ac6d7b37966a84fda18ef4807fd32d8e4c3599fa43b0167ee71e05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kupang76-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80ab2250c43cc44e78f73c254e1c482306f140d7761b03df51e4109f9c23616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b141862481fe2c428b9e33520cd73513974e969aca430ad74b41d165288b421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rangi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5719581572932e78139e1acacb7ca749825d6c84ef4802c98cce4e51a3f2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lengko27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19e336944d33d2b44f4f113e074a182cd50f167bb56295ae9f9f9f171ca2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lengko35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83dcfbbb611043f71db3077c5c9e9c2c045e5be8609143af19af71846f2d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105533aa3bcde4756afa7c88ea53081d0c57cd1e73da9f3c31f08e748e1ac0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f12f372aca5485a9ba3b8ddd023678410369e077ae3c03905c7ff092480e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gado-gado86-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0bda818a1cca929b38f8a5be2c5e9645d1ee2d1eae9be4d1a4b80129fc5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5381d98550865c7e99b0914cfa4b6234964b9461a64ccc339d14fc66b5e11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-semur97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158fcbdabe66de7b74fdf8101f520a1d7e7613e13df19e6ae758c61913911d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85288 Malicious code in existing_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39aef4b4964d560c860cd5a48341eee37124a9be2f583e7f997901c1662d2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91356 Malicious code in udin-kentang72-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97be8156ebc22b3c7fed4de023da62ce1fec7f388d26ea4e16fed5950c0c182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...