MAL-2025-128838 Malicious code in nana-martabak31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c530474a5cf39d27c58da3f5b8fce5e076ce0d2e659e7a0d7138b9b10c6853f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sambel90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76432adfbe9a569e9c923b4ea1cf3f0c41f905c2ba7770f14eef0f89644c1f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121975 Malicious code in nadia-papeda32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b08fd7ee2bb864be26a07968996a321f1fe2d576d86b2d8c067569bf85a809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klanting23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d09598c8aab5057f183f572244fcd790a8948eebd9a78bb78c40032b931305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fd1a0af2d9aec516d7a72796222477142571aef9a70a6f6d02c02e2559384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116914 Malicious code in rudi-pisang23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86e51ad647e85008f1654dcc008bacc5812fbc57caee7a06bfdc532f950471b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108194 Malicious code in romantic_mink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a67664be1c3e9c04d5e35b30521448c9e15f5d9b3b8d8a20a66b6c43e5de833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109563 Malicious code in territorial_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a5e362817b33e72c21c1cf1dcee5c768c8878fa5a287cc866a00c32a4ed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e825e56bb2a3011a7e0ce24a6be3033538eb4e8216bce3fcaf42d7696669c640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa1ab8c99704f4bb62ebffbbf096a518f8130ae0d2d9478ea487b4262473721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105951 Malicious code in monetary_dolphin_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e72ebc4c95d3780555c299459964dd92700d5c43e95ddc280d8fb097be974bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71017dc3d3940a2b18285d791763300a0c49c26be99349f68c1208ac424e774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8595e94b563d4c2b61f1b6eb77af30da36c1644c4ee97413fc19928fd6b1f0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-rujak49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe7280c228e74c44568fb8d766685bfabb2738f8428b9914c05363a61a174fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a2dc7c10f2657f947ea167e86c713ae6c0b3a8a297c5b1791db768705d3b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 506462c7d0622ca14da02d38eaf349dd13a87d6b436b24be2d59ed1fb795b9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-miebogor45-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e2374c8e4b751393f67cc071ad808e51413a4234356f6d449b704dcaf0f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92883 Malicious code in zaki-lutis11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f8830a8ed18c54837b7a99a73754c11e8e88c17b7e840c0ce5b47ca96dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9899df3732fad77b817995b7b0c83ed083e3b0d31bf844b55bcc3830a502bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76962 Malicious code in bambang-rojak4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0320ca63285710e28a8fb252f1eaf9e6543d4ebeea54d603f1ecb7a0b6c053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...