MAL-2025-107456 Malicious code in putra-kue71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53af506326ea38cc322e713dd9510c7cbe07bdb94eee2abf9b770bf6ea42d5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108785 Malicious code in siska-soto20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc71f6d59780e78599555516e7bdef80ba2ae7866e10336895593550fe474e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100132 Malicious code in broken_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67718ee11d41e00a214c24ceb17cb648d2ac39f2fa1cc35a3d895dd1eaf051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98879 Malicious code in primary_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29286bd1923e0ea6f7566511b96c44f6b0c148527dabb9a85baf7f7c910e1daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mie28-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5758c640a5a06794465b537aadc28fd3e032de4029b554f9daa13231598442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97824 Malicious code in fitri-tongseng68-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc36a660155a5f15aa798a87973182a12a4290020652935a9289d4db1e6110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98061 Malicious code in lina-peyek17-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e18429284de8f35d0e4874d21a7a7bc4730b1b561c114c8846da6f11b294e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98233 Malicious code in orca_lavender-1-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dc643b7b3f27193ce6f8276d937a1291584932c62dc3365a1e6d075410d4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearankbreak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616833c00e044253c3380b7ffe45585f552b8926fde4ee8b54a2cd56cb64c68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97674 Malicious code in cockroach_blue-64-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d88ce984e9b31308833bc84a862bf25070a219ac93d4280243e2839b3ef01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-otak-otak48-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858ed426f2e3c853e0a1466d20708ee08ead73c0f2bdbfd9657930f7a8110d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdd0bc716529f616d43e328a82a3c9a713139d94e5a744f3227ee83a7745fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c113ae7bf34a1012b9deca7448f82356113822cb4640f3120bd2298401e35a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93231 Malicious code in angry_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c91812bc4186641df5bfeffb4ad20776cd3fd974ab8badd51445df99bf2be2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93633 Malicious code in coloured_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9ca827592058f4f765f4ab77ced4617e7da4856df6ae6b97280f314569a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef100ac2fa39fa8a07993fbb5df8e406db4e7b9135f411fbe7bdc330cb7ea4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b35c5c398425547599428013fe6e00357b8f550730086f64fe3a25530712fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de454ddeb5f544abb404f5f0300d61d5f1eb156c7af8a3abb0b0a0b37680f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97023 Malicious code in tired_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d77e3857d48d49a136865f898ce47b3dc62e4d56a72f5e908411692ea7646895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_fox_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab801bea8a7bcd11ee4f5c1d461174f4674f8cbc38f486025e05c7f7bd3cb59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...