MAL-2025-136297 Malicious code in public_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2628c068cb934d1b78077e5a725b4854bd2488640c3e41d73784cb3dc22773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133900 Malicious code in graceful_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac89646c5e71550b42aecb899dce759c9930eaac0fca2e336d9946037a80538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136287 Malicious code in proper_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6b7322d1d7c9f581fb55391d959a632709a8f61d59d1ad884f369a2898ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132802 Malicious code in dian-asinan46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c14eb0b57dc8ca7115ee8f757bfa233c0faa7f8da85bfefbf1d1fbd8caa7fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133214 Malicious code in erwin-martabak13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b536c087c349030d7e4530f55e0c8fb76ccb7caa48d511f4dd5ada9b6b139f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135811 Malicious code in nina-lupis74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fe852163d9a43550763ff4fef1a76e3f0a88758b346c59d5312d8683201edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137823 Malicious code in vina-kue41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7665b654f95183cf1f4439b7ded5dae6cbe213e346d01ec58070dc3d9d6f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137410 Malicious code in tricky_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eb6a0d2d38436df5e54df65879645ae26cf5ad913981536c86b8fd5538b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137985 Malicious code in wawan-nasiuduk5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e45582439efdc42950dcc158bd251b37c71bc381e21be967edb8d1dc4e0e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135061 Malicious code in laila-esdoger71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c533e3b725bc649d7d4acdce73a5b523e9b8d7718dfc88455e27c88bca30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-otak-otak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b9b364f9170f6e7ad4c970bddd383737274ea8cc161a29dae496cbbade3644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fe94aa1ae5224069292366d2adf12111184a4e81c96a8cf24749cd11fcdae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c807765b40ad8394f7cbba53091eb63f8e1f1d82fc43a13617abdd650d82c676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b0e4ad0af57d5d6f570e443db2efd6625747e974c9f89a01534335dca395b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lapis33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f0ac70e955752454877c9a5f5558119a65afbc4e9c04f0e6ea43382f812423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c51ee808bcabdc5eb4ce67733e7d1f012d313eb25c0ea45aa9f727f4773af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-semur51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed92e09d3e94e2be3739bc6de6b0949156c4da268977f6ad9efd93f8db5d95e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a5e7c3f856d7664633b564387b551334d41ab2ffa55c1b2aac2d98ac0c194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-oncom31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298b41e597df4f0d4ac00dfe9f7f996c722ef08ada70b30def1151aaab5a7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worried_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14111b222643a40c8fcf173e9c31c2740b4b999337e9b15e849a12a194db9c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...