MAL-2025-104198 Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99245 Malicious code in aggregate_rat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7fb401b0c704efd4634e9a2130ba049eda7b568bb369707f67d615ec5287cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104532 Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darren-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f01a871b06ca5806173567d7ea18bfa769a2c2aa2a7a0974c571008c6a887ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11715e0c2aaefcc99755eb2ff7d1c2f55ff68c89ba7927f24120200a33c803d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c64e82c613a50041c3fe79cd8bfcd6370f5d92529bfbf32eba2ddb86f6183e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kemplang89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecc6671ac37d2601a1ad306c3994ce32dc5570f7ebb33893737de1769001b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kue42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27f4b53f7de949862e630948c0154bc9ce4edda08b7ea9dd514387741efa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rujak91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb24b6037a5105282fe20f09e69354305e1ffeb5bc40a7f24d2eaecd043fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107164 Malicious code in possible_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6246c74152668e7df8cfe34ba8e715bd1c3dacb627ee42dc33f66889535df8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106687 Malicious code in oktafian-mie54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d74454dfdecfce9a25ac900914bd865973ef6782b6de4390990bd8efa3f6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-mieayam15-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702ab70377c6d3c813656db1b60df7d35dab4b3e161d3a520dbb2b3579a813a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a9583e93402c82b8c19233bd18862ec2c80d7a8062688d3bff2986146012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e00c2340ff5b19b81ce06f2243cc71c1d9ed2bf8dfd4f0a5720e960be3464d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-donat64-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44b4b0afc8e485dd477c15e999de21bbb912c40fc0fda08a9bbf7ffd12113f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ragi7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e18e6c64cf36d86314ff04e7c67a0c52cea96fa89170db5aedae310afba5840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2eac643b723256fe89823e6e1f01ebd10f28f40996f5cc77a6861408bd697e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-serimuka79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b9a28e96024fd764ee71d904d5195a0b615de8c75b3fc2bc02d765457c475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ikan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4742b69045c5ec46294fa57dc06680ca8e2be1d28bca84fc25f6cbda5582a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lutis100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da2a0af37c074bb8706d30d2f4edf563f28e1a853f43a82f5777d4ed87f9b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...