MAL-2025-93688 Malicious code in complicated_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ba48f2e20cc544c33dfe41989e4c42bc08743db366f9acd17623d25c7e0e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96985 Malicious code in theoretical_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431337565af8e8d587f3ffe68d2ce47ec5ba46d6627e71160ee863fc0213e871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94476 Malicious code in fellow_beaver_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8f66c1d0d8ef272533d3b462051487186e44702d5a4e708d099b395ce334cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lodeh35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd07dd56607adcb860a3c10d79d6c73087b615edd526461417f3dedb00d73e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lupis28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a9256d32593c240500cdeadd6b94a398452632acf79a0b51c951f8984af59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kemplang50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6714bded95b23e19f79860981a85829de9e069ad0c58f70688eaa35b208907f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c609ecc191fc17aefcc0785ee36d7d192d30d89742def98d78e93e2e0a8333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff7ead13fd96b4f46d0323353f818748c2f0fd4f1219967ac8f2d4a40640633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu6-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da830807b31350d357bd7b4c56cabd47ce3285a1aec8c97bc3f420f76c51cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-oblok65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d969da8ac6d7b37966a84fda18ef4807fd32d8e4c3599fa43b0167ee71e05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kupang76-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80ab2250c43cc44e78f73c254e1c482306f140d7761b03df51e4109f9c23616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b141862481fe2c428b9e33520cd73513974e969aca430ad74b41d165288b421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6795aa186e19dc347ee8bd872b64d4654e664fda87aaebc13cb62625382e61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rangi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5719581572932e78139e1acacb7ca749825d6c84ef4802c98cce4e51a3f2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-lengko27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb19e336944d33d2b44f4f113e074a182cd50f167bb56295ae9f9f9f171ca2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lengko35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83dcfbbb611043f71db3077c5c9e9c2c045e5be8609143af19af71846f2d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105533aa3bcde4756afa7c88ea53081d0c57cd1e73da9f3c31f08e748e1ac0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f12f372aca5485a9ba3b8ddd023678410369e077ae3c03905c7ff092480e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gado-gado86-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0bda818a1cca929b38f8a5be2c5e9645d1ee2d1eae9be4d1a4b80129fc5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5381d98550865c7e99b0914cfa4b6234964b9461a64ccc339d14fc66b5e11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...