MAL-2025-125643 Malicious code in crowded_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2657fdf700250bae812a94a62626cd230a492a68396277c119cd467016ded9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131293 Malicious code in western_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757a95b9c21207ce744de421e0f2cb9d9e56e97eda9032701f1a41b8c235480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125436 Malicious code in cindy-kue8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5b900be1c1108d494c5ac0afd7b307c4bf05bddddcc06d5cda8674ccc206fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124923 Malicious code in alright_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43278da8c98e5e1698d2265cb9ae6584a7990e18b03c0def7b6310e860e7575f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130863 Malicious code in unique_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af2ddf54765d344e98c9c5e16007c822601c707501a009c3f8adc7b439858cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130677 Malicious code in tropical_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31db784694c48c2c61009dddffab4279c1b24f9d19ac556cfaf5f9600b9f4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128562 Malicious code in married_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c0b6b51a01e3769315d68a9448faba73615bf718c6f536c02d80061a3e9015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131221 Malicious code in wawan-gulai12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9fda81a3cbd6a06691c0f8a84d00fafa4b17c6942cfc6b9f95ac5a2fc40b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128577 Malicious code in maya-gembus5-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb753382a783ecc88cc7e23423fc3921db353bdfff76fee208ea0d230bf4b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tahu42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42ee58a1f28eb20d23f2602cf0b240feb0f9fcd9b1d45bf05f1acff5b61011b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-ongol-ongol26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d4be3a2cc8080ab3915399de3ee1ac277ef20405dbbd4070fab422bcc1cacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-saguer64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca6e58429d9296565b99c2591b98e2e483c210ab94cc2992bbb431904304e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-buburayam11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21eae86e93c9e575a6d5ed6946a1207a86566de7bf4bf4bbd14a5ccb071687b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-tempe71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f30da67452715f0c42a6577bf07e083aa2bf15fbc1b9efe0e56e2851b427881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970bdffc29a8ebba4adcfef3a995a44f768b5221eac90e5e8334b4bf10581d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125668 Malicious code in dark_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ac25c5e334ac06b2a14563da961c583f5a8204ea0c0474597a03f4a5186fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131347 Malicious code in wibowo-oncom86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e570addb37f5816c8958a978db2c3a4c9d592627f6355d3445d2ce8b318c70d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126677 Malicious code in galih-lengko64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807db916c58ad9967991ed475c188c616daa5c974e38e56f8ceac61a98ea931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124999 Malicious code in arif-klipo50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c789c34648c2ade9419da450776c0e8994abe50eeec3ba7284ea810ba42420ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129704 Malicious code in recent_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95677c4dce71cf1baeccee4a82ec71f1f9cf51c2b9f4dbf89733b81673dae9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...