MAL-2025-95705 Malicious code in obedient_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b163288372c2d730b95954b2f42f0bf8b63cc36500bc14be3598aaa441d341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93941 Malicious code in decisive_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e247fc3fee8b1d8e6ae6363cb7207ea3674f4ccdea053bb1d5b5085430530faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95444 Malicious code in mental_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47516d12ed004d9ff040d0af0badbb117c7086d92c1ff00f08bde780c83e2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gepuk34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f07e529543601ceb4e88b7ff7ecfca57032968762f948cd1cc2c9023238efbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71cfe931cb625a0fbdc7813077e0949ce438ad9575a6d54e97c179d55e5f65c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-getas3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df1274d9c92054969e71f8edb850aae55ba992cbe1099529cafa92aebabc622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in related_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565a1d9ef6468ab7dbc689604354ac3e0f463dde0eaa1e8b623386ae9a646456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956eebed64492f353fb6fd241b243a8afb349b59d3302eb889e484b003322f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870d279acd10ca1cc6c086dd19da485c4d21906d342b32776f2f4564467a80e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-gulai21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c261f6564beff2ae8939a75dfc2aa2b8785399ff1f52944e7defd26aa3ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kembang3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a807270787fe1a06a6ebd737fb0b24a5efd0daa3b7555208ba764e80ad884238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tahutek62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5afb262b3470f953a658718e760e204442cbf7ee56e8db0849f0e6f365c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59eab1040d443bd899e9f888274dd9ebbc206e6282be8c07a99d929b80f1284e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sambalado24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e2a19f513f34ac0e39c7fe2464532a6a022193d6f5a052ca33db0804e48be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mangga100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44491920d3872d7723c7aff307f67a0eb16bcc2cf90dda3772df4c0edddc5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-ketoprak18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24eb9cecff38bfccf3dd50c0a4a28ebe650cf23293e305ae865709b88068f5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84510 Malicious code in dewi-lutis79-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7121ae542f472a485371715c1b1c3d09cc2d0917dde5ac84c780bb88b26b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90248 Malicious code in rudi-dodol58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a23fbf72ce808d5f70663f9bdb4be82b571a184d4fd5867d44a5de42a59c09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86594 Malicious code in important_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd74da7c90cbb1c47e721b2fa6e1d2c23bc92431ab1955dfa695d28d8e17c259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87178 Malicious code in joko-takokak24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4207b5d3c6c0adf169948f138634e05a5259e8e6ab37e09ab8fa0e7b5848a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...